Application Security Engineer

Role : ASC Champions / Application Security Center

Location : Charlotte, NC (Hybrid)

Type : Contract

Check out the role overview below If you are confident you have got the right skills and experience, apply today.

Must have : App Security, App Development, Risk, Vulnerability

• Minimum 10+ years of relevant experience.

• Strong security and vulnerability expertise across application and infrastructure layers.

• Proficiency in Application Development, Application Security, and Security Services.

• Solid understanding of Risk Management, Vulnerability Assessment, and Remediation.

• Expertise in SDLC (Software Development Lifecycle) and Product Lifecycle Support.

• Infrastructure and application security knowledge at a senior/lead level.

• Go-getter attitude with ability to manage large, complex platform portfolios.

• Familiarity with CISO organization structure and enterprise security governance.

Required Qualifications

• 10+ years of experience in application security, application development, or related cybersecurity roles.

• Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.

• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).

• Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.

• Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.

• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.

• Excellent stakeholder management and communication skills; ability to influence without direct authority.

• Experience in financial services or banking industry strongly preferred.

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP), Certified Application Security Engineer (CASE), or CSSLP.

• Experience working in a large enterprise banking environment with multiple business units. xhyhwjd

• Familiarity with DevSecOps toolchains (Jenkins, GitHub Actions, SonarQube, Veracode, Checkmarx, Snyk).