Senior Application Security Engineer

About the Role
Our client, a leading innovator in the fintech sector, is seeking a highly experienced Senior Application Security Engineer to join their distributed, remote team. This role is paramount in ensuring the security of our client's software applications throughout their entire lifecycle, from design and development to deployment and maintenance. You will collaborate closely with development teams to embed security best practices, conduct security reviews, and identify and mitigate vulnerabilities in our codebases. This is a fully remote position, offering the flexibility to work from anywhere while contributing to the security of critical financial platforms. Your expertise will be key in protecting sensitive user data and maintaining the trust of our global customer base.Key Responsibilities
Lead security architecture reviews and threat modeling for new and existing applications.Develop and enforce secure coding standards and guidelines.Perform static (SAST) and dynamic (DAST) application security testing.Integrate security testing tools into the CI/CD pipeline.Work with development teams to remediate identified application vulnerabilities.Provide security training and guidance to software engineers.Stay abreast of the latest application security threats, vulnerabilities, and mitigation techniques.Conduct security assessments of third-party software components.Develop and maintain security automation scripts and tools.Advise on secure design principles and best practices for application development.Requirements
Bachelor's degree in Computer Science, Software Engineering, or a related field.Minimum of 6 years of experience in application security, software development, or a related field.Proven expertise in secure coding practices, threat modeling, and vulnerability assessment.Strong knowledge of common web application vulnerabilities (e.G., OWASP Top 10).Experience with SAST and DAST tools.Proficiency in one or more programming languages (e.G., Java, Python, C#, JavaScript).Experience with cloud security principles (AWS, Azure, GCP).Excellent communication, collaboration, and problem-solving skills.Ability to work independently and effectively in a remote team environment.Relevant security certifications (e.G., CSSLP, GIAC-GWEB) are a strong plus.Benefits
Our client offers a highly competitive salary, comprehensive benefits package including medical, dental, and vision insurance, and a generous retirement plan. This fully remote role provides exceptional flexibility and work-life balance. You will have access to cutting-edge security tools and continuous learning opportunities, including conference attendance and certification support. We foster a culture of innovation and collaboration within our globally distributed team.
#J-18808-Ljbffr