Senior Application Security Engineer

Must have :
App Security, App Development, Risk, Vulnerability

• Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.
• Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.
• Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.
• Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.
• Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.
• Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

• 12+ years of experience in application security, application development, or related cybersecurity roles.
• Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.
• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).
• Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.
• Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.
• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.