We are seeking a Senior Application Security Engineer to define consistent Security Software Development Lifecycle practices across all client technology projects. In this role, you will ensure application security vulnerabilities are mitigated to tolerable levels throughout the planning and delivery cycles. The ideal candidate brings strong application security knowledge, web application development experience, and team leadership skills, along with a solid understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling.
You will collaborate with developers to produce secure code under tight deadlines in a dynamic environment.
Collaborate as part of a team of software and security engineers to design, maintain, and build product security tools and services Serve as the technical point of contact for product teams regarding CI/CD automation and Product Application Sec Ops Leverage approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities Build and automate scripts that enable developers to easily consume security services delivered by the Sec Engineering and Automation team Own security product QA and testing activities Run software composition analysis (SCA) tools Interpret and explain penetration testing findings to the software engineering team, assisting them with triage and risk mitigation guidance Art