Application Security Engineer
Syed A.United StatesMIDPosted 12d ago
Application security testingVulnerability assessmentSASTDASTIASTOWASP Top 10Burp SuitePostmanSynopsysBlack DuckJFrogPrisma CloudAPI securityWeb application securitySecure SDLCDevSecOpsCI/CD pipeline security
About the Role
We are looking for an experienced Application Security Engineer with a strong background in Banking or Financial Services to join our Information Security team.
Key Responsibilities
• Perform application security testing for web applications, APIs, mobile applications, and databases
• Conduct manual security testing and vulnerability assessment
• Implement SAST, DAST, IAST, and third-party library scanning
• Analyze vulnerabilities, assess risks, and track remediation
• Support secure SDLC, DevSecOps, and CI/CD pipeline security
• Utilize tools such as Burp Suite, Postman, Synopsys, Black Duck, JFrog, or Prisma Cloud
• Apply knowledge of OWASP Top 10 and secure coding practices
Requirements
• 5+ years of relevant Application Security experience
• Mandatory Banking or Financial Services experience
• Strong API and web application security testing expertise
• Experience with application security tools and vulnerability management
• Must be available to work onsite in New York, NY