Senior Application Security Engineer

Job Description

Lawrence Harvey has partnered with a Financial Services firm in search for an Application Security professional to join their team.

\n

\n

Responsibilities:

\n

\n
• Conduct dynamic application security testing (DAST) and software composition analysis (SCA) scans to identify and address vulnerabilities.
\n
• Collaborate with development teams to triage and remediate security findings from static (SAST), dynamic (DAST), and composition (SCA) scans.
\n
• Help build the Security Champions program, promoting secure coding practices, patterns, and standards across our development teams.
\n
• Integrate threat modeling into the software development lifecycle (SDLC), creating and maintaining models to anticipate and mitigate potential risks.
\n
• Stay ahead of emerging security threats and industry best practices, continuously enhancing our security posture.
\n
• Evaluate and select cutting-edge application security tools, processes, and standards.
\n

\n

\n

Experience preferred:

\n

\n
• Strong well-rounded background in cybersecurity, specifically within Application Security; ideally 5+ years in such role
\n
• Hands-on experience with DAST tools and familiarity with SCA tools.
\n
• Strong understanding of common vulnerabilities and familiarity with OWASP Top 10
\n
• Ability to define, initiate and lead an Application Security program
\n
• Experience threat modeling, reviewing code, remediating vulnerabilities
\n
• Proficiency in at least one programming language - ideally: Python, Java, Javascript
\n
• Experience leveraging AI/LLM tools for automation
\n

\n

\n

Preferred qualifications:

\n

\n
• Degree in Tech discipline: Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent
\n
• Certifications: CISSP, CEH, CSSLP
\n

\n

\n

Please note:

\n

\n
• The client is unable to transfer or sponsor visas at this time; US Citizen or GC only
\n
• NO C2C
\n