About the role
As an Application Security professional, you will help strengthen the security of applications by developing security policies and standards and supporting application security practices. You will work across secure development, application assessments and threat modeling while applying your knowledge of related security domains.
What you will be doing
•Develop and maintain policies and standards for application security.
•Perform and support static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), API security assessments, threat modeling and container scanning.
•Conduct secure code reviews and identify vulnerabilities through manual and automated testing.
•Help teams understand and remediate application security vulnerabilities.
•Apply working knowledge of cryptography, identity and access management, and threat and vulnerability management.
What you bring
Required qualifications
•9+ years of experience in software development and application security, including API security, SAST, DAST, SCA, secure code review, threat modeling and container scanning.
•Hands-on experience with application and API security assessments using tools such as Burp Suite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode or Checkmarx.
•Strong knowledge of application security, web applications, OWASP Top 10 and SANS Top 25, including identifying and remediating vulnerabilities.
•Strong knowledge of information security principles and security technologies, including encryption, data protection and privileged access.
•Experience building effective working relationships with colleagues and clients.
Preferred qualifications
•Experience with software composition analysis tools such as Black Duck.
•Knowledge of common malicious-code and attack techniques.
•Broad working knowledge of cryptography, identity and access management, and threat and vulnerability management.
The impact you'll make
As an Application Security professional, you will help strengthen security throughout the software development lifecycle. Your work across security standards, threat modeling, testing and vulnerability remediation will help teams identify application risks and address them effectively.
What we offer you
•Internal career growth opportunities
•A voice in the future of fintech
•Always-on learning and development
•Collaborative work environment
•Opportunities to give back
