Senior Security Engineer, Application Security

Application Security Engineer (Senior Officer)

Reporting to the Global Head of Security, the Application Security Engineer plays a crucial role in leading our Application Security program, ensuring the highest level of security for our Engineering teams. The ideal candidate must have empathy for developers and intimately know the tools and workflows they use on a daily basis, while understanding the importance of communication, documentation, and taking accountability. The incumbent is an engineer who prioritizes addressing security challenges through technology and automation with a history of enabling developers with actionable security guidance. The candidate has experience with security code review, threat modeling or security architecture reviews, and can identify vulnerability paths explaining how they could be exploited while familiar with options for mitigation.

Responsibilities

• Shift left” security efforts to build security into the software development lifecycle :
• Conduct secure design reviews and threat modeling to identify and prioritize risks, attack surfaces, and vulnerabilities
• Deploy and operationalize static (SAST), dynamic (DAST), dependency (SCA) and secrets scanning
• Work with Platform DevOps team to build and maintain security automation tools to seamlessly embed inline security checks into CI / CD pipelines
• Partner with Platform DevOps to help design secure-by-default architectures and workflows
• Assist with application security code reviews of source code changes and advise developers on remediating vulnerabilities following secure coding practices
• Establish and track SLA governance to ensure security findings are identified, prioritized, and remediated.
• Maintain application asset inventory.
• Lead the Security Champions Program to build security-minded culture amongst developers and IT Operations teams.
• Act as a trusted advisor and partner for development and cross-functional project teams, providing actionable guidance to address security.
• Help with training on secure coding practices, empowering teams to proactively prevent vulnerabilities.
• Evaluate and implement security tools and automation solutions to enhance the security posture of applications and streamline security processes.

PROFILE