Application Security Specialist
Listed on 2026-09-13
-
IT/Tech
Cybersecurity
Application Security Specialist (Vice President)
Iselin, New Jersey
$140,000–$180,000 per annum + annual discretionary bonus
On behalf of a Leading financial services organisation, I am seeking an Application Security Specialist to help development teams build secure, resilient software. This is a hands-on App Sec role focused on assessing real-world application risk, validating security findings, and providing practical guidance to engineers. This is an exciting role that will offer exposure to the latest AI technologies.
Your focus will be on interpreting results, prioritising meaningful risk, and partnering with developers on remediation and secure design.
The organisation is pleased to offer the role on hybrid basis with two days required in their New Jersey office, therefore you must be within reasonable commuting distance to this location.
Responsibilities:
- Analyse and validate findings from SAST, DAST, SCA, API security testing, penetration tests, AI-assisted analysis, and code reviews.
- Assess vulnerabilities based on exploitability, business impact, compensating controls, and overall risk.
- Partner with developers to prioritise remediation and implement secure solutions.
- Lead threat modelling, secure design reviews, and architecture risk reviews.
- Promote secure coding standards and reusable security patterns.
- Provide App Sec expertise to improve security testing and SDLC processes.
Experience /
Skills required:
- At least 5 years experience in application security, secure coding, vulnerability management, and secure-by-design practices.
- Knowledge of OWASP Top 10 and common application/API vulnerabilities.
- Ability to read code, validate findings, identify root causes, and advise on remediation.
- Experience with threat modelling and secure design reviews.
- Practical knowledge of SAST, DAST, SCA, API security, and secrets detection.
- Experience in AI-assisted analysis would be advantageous but not essential.
- Strong communication, risk judgement, and a collaborative, coaching-oriented approach.
- Degree in Computer Science, Cybersecurity, or a related discipline, or equivalent experience.
- CISSP, CSSLP, GWAPT, GWEB, or equivalent certification preferred, but not required.
* PLEASE NOTE:
The organisation are unable to offer Sponsor ships or transfer of visa’s, therefore you must be eligible to work full time in the US.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).