Application Security Engineer

We are seeking a hands-on Application Security Engineer to strengthen the application security program for a leading financial services organization. This role focuses on testing web applications and APIs, validating vulnerabilities, improving security tools, and partnering with developers on remediation.

Responsibilities

• Manually test web applications and APIs for security vulnerabilities
• Review scan results, validate findings and false positives, and track remediation
• Support SAST, DAST, IAST, and third-party library scanning
• Integrate application security tools into CI/CD pipelines
• Advise development teams on secure coding and application security best practices
• Monitor CVEs and produce application security metrics

Requirements

• 5+ years of application security experience
• 5+ years of manual web application and API security testing
• Strong knowledge of OWASP Top 10, secure SDLC, and DevSecOps
• Experience with vulnerability assessment and remediation
• Experience configuring application security scanning tools and integrating them with CI/CD pipelines
• Strong communication skills and the ability to partner with developers

Preferred

• Experience with Burp Suite, Postman, Synopsys, Black Duck, JFrog, Prisma Cloud, or similar tools
• Familiarity with applications built using Java, C#, JavaScript, React, Angular, and REST APIs
• Bachelor’s degree in Information Security, Engineering, Computer Science, or a related field