Senior Application Security Engineer

Job Description

Application Security Contract

\n

Charlotte, NC (Hybrid)

\n

Full-Time

\n

\n

Must have : App Security, App Development, Risk, Vulnerability

\n

\n

Job Description:

\n

Key Responsibilities

\n

•Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.

\n

•Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.

\n

•Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.

\n

•Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.

\n

•Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.

\n

•Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

\n

\n

Required Qualifications

\n

•12+ years of experience in application security, application development, or related cybersecurity roles.

\n

•Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.

\n

•Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).

\n

•Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.

\n

•Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.

\n

•Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.

\n