Senior Application Security Engineer

Our client, a leader in Vertical AI SaaS solutions, is a pioneering force in the tech industry. With over 20 years of expertise, they collaborate with some of the world's top firms across sectors such as accounting, consulting, investment banking, legal, private capital, and real assets. Their innovative approach, driven by the principles of "Intelligence Applied," is transforming how businesses operate by leveraging the power of AI and cloud technology. A strategic partner with Microsoft, our client delivers cutting-edge industry cloud solutions that are shaping the future of business operations. The company culture is built around accountability, responsibility, and growth, fostering an inclusive, diverse, and collaborative environment. Since going public in 2021, they have expanded rapidly, growing to over 1,200 employees globally with development centers in locations such as Palo Alto, Charlotte, Belfast, Berlin, and Lisbon.

Responsibilities:

• Security Feature Definition: Collaborate with product teams to define security feature requirements and integrate them into the development lifecycle.
• Risk Identification & Mitigation: Proactively identify and control risks using techniques like threat modeling, ensuring products are secure by design.
• Automated Security Testing: Design and implement automated security tests to validate the security posture of products.
• Manual Security Assessments: Conduct manual security assessments, including code reviews, to identify vulnerabilities and recommend fixes.
• Vulnerability Response: Lead vulnerability response efforts, coordinating with teams to triage, resolve, and communicate security issues effectively.
• Cross-Functional Collaboration: Work closely with distributed development teams to align security practices with the development process, ensuring secure coding practices are followed across the board.
• Continuous Learning & Innovation: Leverage curiosity and creativity to explore and implement new security techniques, tools, and methods to enhance the security of our products.

What You Will Need:

• Experience: 8-10 years in cyber security engineering, with at least:
  • 3+ years in an Application Security role.
  • 5+ years of experience in development and security roles combined.
• Technical Expertise:
  • Proficiency in backend development with Java or Python.
  • Experience with classic .NET Framework and modern .NET is a bonus.
  • Familiarity with frontend development using at least one JavaScript framework.
  • Experience in test design, including unit tests and end-to-end tests, both automated and manual.
  • Strong understanding of SCA (Software Composition Analysis), SAST (Static Application Security Testing), and DAST (Dynamic Application Security Testing), with a history of turning security findings into teachable moments for development teams.
  • Application penetration testing experience is a plus.