Senior Application Security Engineer

Charlotte, North Carolina, United States; Virtual Overview AvidXchange is a dynamic, technology-driven B2B payments organization that values collaboration, creativity, and excellence. As a Senior Application Security Engineer you will help ensure the security and integrity of our applications, systems, and data by identifying and driving remediations of vulnerabilities and threats across our product portfolio. What you’ll do Cross‑functionally collaborate with technology teams to identify and remediate security issues. Provide guidance to product and technology teams on security best practices. Develop an understanding of application risk profiles, build relationships, and influence decisions to continuously maintain cybersecurity resilience. Utilize software architecture security analysis, web application penetration testing, and application reverse engineering. Develop training based on experience and discovery targeting identified areas of opportunity. Understand root causes, identify data and patterns associated with potential weaknesses, and drive improvements across all levels of leadership. Assist in investigating, analyzing, and responding to security incidents related to applications, ensuring timely resolution and documentation. Lead threat modeling and risk discovery efforts across multiple product verticals, providing guidance and mentorship within the team and organization. What we’re looking for 5+ years of information security experience in a SaaS environment with a deep understanding of application security. Experience using common application security tools such as Burp Suite and OWASP ZAP for security testing. Knowledge of and experience implementing application security tools and platforms, integrating them into SDLC processes and code delivery pipelines. Deep understanding of security protocols, encryption methods, CI/CD pipelines, and DevSecOps practices. Experience leveraging AI tooling and capabilities (LLM / MCP) in an information security context. Certifications such as CPSA, CRT, CCSAS, CompTIA Pentest+, OSCP, ECSA/LPT, CISSP (preferred). Working knowledge of infrastructure as code tools and serverless architectures. Strong technical aptitude, genuine interest in cybersecurity, and a problem‑solving mindset. Proven ability to think critically and address complex security challenges by building strong relationships with colleagues and stakeholders. Self‑motivated and proactive mindset in identifying potential security risks and implementing preventive measures. Excellent verbal and written communication skills to convey complex security concepts to both technical and non‑technical stakeholders. Ability to work well within a team and across departments to achieve common security goals. About AvidXchange AvidXchange is a leading provider of accounts payable automation software and payment solutions for middle‑market businesses and their suppliers. With a culture built on the mindsets of connectivity, growth, and customer obsession, we empower 1,500+ teammates across the U.S. and remote locations. What you’ll get 18 days PTO* 11 holidays (8 company‑recognized & 3 floating) 16 hours per year of paid Volunteer Time Off (VTO) High deductible health plan option with $0 monthly premium for teammate‑only coverage 100% paid life insurance 100% paid long‑term disability 100% paid short‑term disability Employee Assistance Program providing counseling services, legal and financial consultations and health advocacy for teammates and eligible dependents Onsite health clinic with Atrium Health – available to teammates and eligible dependents 401(k) match: 100% match on first 3% of salary, plus 50% match on next 2% Parental leave: 8 weeks 100% paid by AvidXchange** Discounts on pet, home, and auto insurance Perks at Work: free discount program on electronics, movie tickets, car buying, vacations, and more Onsite gym fitness center, yoga studio, and basketball court Tuition reimbursement up to the federal maximum of $5,250*** Hybrid workplace flexibility Free parking

• Fully granted from beginning of year, pro‑rated if hired mid‑year
• *Must be full‑time for at least 3 months
• **Must be full‑time for at least one year

AvidXchange is an equal opportunity employer. AvidXchange is committed to equal employment opportunity in accordance with applicable federal, state, and local laws. AvidXchange will not discriminate against applicants for employment on any legally recognized basis. This includes, but is not limited to veteran status, race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age and physical or mental disability. #J-18808-Ljbffr AvidXchange