M&T Bank Corporation

Senior Application Security Engineer

M&T Bank Corporation$102K — $171K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree with 3 years of relevant experience, or 7 years equivalent experience including 5 years in software development or application security
  • Experience with application security tools (SAST, SCA, IAST, DAST, ASPM)
  • Intermediate understanding of the Software Development Life Cycle (SDLC)
  • Ability to train both technologists and leaders on secure application development
  • Excellent communication and interpersonal skills

Responsibilities

  • Develop and implement technical security policies and procedures
  • Scan and test applications for security vulnerabilities
  • Advise engineering teams on secure coding practices during code reviews
  • Integrate security tools into the DevOps pipeline for early vulnerability detection
  • Lead training sessions on secure coding and information security best practices
  • Configure automated tools to address application security weaknesses
  • Collaborate with incident response teams to remediate vulnerabilities

Benefits

  • Hybrid work schedule
  • Opportunities for professional training and development
  • Supportive work environment that promotes belonging
  • Participation in a company with committed cybersecurity practices
  • Engagement with cutting-edge technologies in a growing field
Full Job Description
This role offers a hybrid work schedule at our Wilmington, DE Tech Hub.
Overview:

Responsible for capturing and refining information security requirements and ensures their integration into information technology component products and information systems through purposeful security design or configuration. Provides advanced working guidance to technology teams and leadership in the areas of secure coding, application authentication, encryption, and quickly research and become competent in other areas as needed.

Primary Responsibilities:
  • Develop and implement engineering's technical security policies and procedures, and performance of security measures,
  • Scan and test applications for potential vulnerabilities and non-compliance with security standards,
  • Partner with engineering teams during code reviews to identify potential security vulnerabilities and advise strategies to develop more secure code,
  • Integrate security tools and processes into the software development and operations (DevOps) pipeline, including automation of security checks and scans to identify and fix vulnerabilities early in the development process.
  • Lead training sessions for technology teams in one-on-one coaching and large team training sessions on secure coding practices and information system security best practices.
  • Configure and manage automated tools and solutions to address security weaknesses in applications, systems, and infrastructure.
  • Partner closely with incident response teams to mitigate the impact of incidents from application security vulnerabilities and identify necessary steps to remediate findings.
  • Proactively recommend process enhancements and implement prioritized improvements within Cybersecurity team to enhance application security capabilities.
  • Track current events, technological advancements, and changes in the secure application development landscape to anticipate how attackers may change their tactics, and implement adjustments to internal technologies, policies, and procedures.
  • Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
  • Promote an environment that supports belonging and reflects the M&T Bank brand.
  • Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
  • Complete other related duties as assigned.


Scope of Responsibilities:
  • Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity.
  • Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met.
  • Proficient ability to use multiple Cybersecurity tools, specific to function.
  • This role is used within Cybersecurity, typically in one of the following ways:
    • Application Security - partners with engineers and developers to secure first-party and third-party code by reviewing the application, data, and systems it interacts with.
    • Product Security - secures products by ensuring they are designed, developed, and delivered in a secure manner".


Manager Responsibilities:

No supervisory responsibilities

Education and Experience Required:
  • Bachelor's degree and a minimum of 3 years' relevant work experience, or in lieu of a degree, a combined minimum of 7 years' higher education and/or work experience, including a minimum of 5 years software development or application security
  • Prior experience reviewing or fixing vulnerabilities identified using application security tools such as static application security testing (SAST), software composition analysis (SCA), interactive application security testing (IAST), dynamic application security testing (DAST), or application security posture management (ASPM) suite
  • Intermediate understanding of the Software Development Life Cycle (SDLC)
  • Ability to train technologist and people leaders at various levels on secure application development, both in person and virtually
  • Excellent communication and interpersonal skills


Education and Experience Preferred:
  • Intermediate experience reviewing or fixing vulnerabilities identified using application security tools such as static application security testing (SAST), software composition analysis (SCA), interactive application security testing (IAST), dynamic application security testing (DAST), or application security posture management (ASPM) suite
  • Understanding of common software weaknesses that impact cloud and web applications, beyond the Open Worldwide Application Security Project (OWASP) Top 10
  • Demonstrable experience developing and maintaining automation for application security tasks and defect identification
  • Experience developing enterprise applications
  • Knowledge of secure configuration of cloud-native and containerized apps in one or more Cloud environments
  • Certifications in the area of Application Security
  • Proficient persuasive communication skills to gain buy-in of others in cybersecurity and technology teams
  • Ability to create an effective learning environment that allows for maximum learner results
  • Must be comfortable with providing 1-1 coaching for all levels of individual contributors and up to SVP management
  • Ability to build and maintain effective relationships within and across multiple technical teams
  • Prior experience utilizing continuous integration and continuous deployment (CI/CD) pipeline instrumentation
  • Highly proficient at coding with one or two programming languages
  • Highly proficient with Agile development methodologies and version control systems
  • Experience defining and reviewing software security features and capabilities

#LI-JB3 #Hybrid

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $102,939.06 - $171,565.10 (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.

Location
Wilmington, Delaware, United States of America

About M&T Bank Corporation

M&T Bank is a financial holding company headquartered in Buffalo, New York. M&T's principal banking subsidiary, M&T Bank, operates banking offices in New York, Maryland, New Jersey, Pennsylvania, Delaware, Connecticut, Virginia, West Virginia, and the District of Columbia. Trust-related services are provided by M&T's Wilmington Trust-affiliated companies and by M&T Bank. M&T Bank traces its origins to the founding of Manufacturers and Traders Bank in Buffalo, New York. As a result of mergers, acquisitions, and name changes, M&T Bank Corporation's principal bank is now known as Manufacturers and Traders Trust Company or M&T Bank. M&T Bank reorganized under a bank holding company in 1969 called First Empire State Corporation. The name was changed in 1998 to M&T Bank Corporation, whose common stock is listed on the New York Stock Exchange and trades under the symbol "MTB."

M&T Bank Corporation Careers

Join the vibrant team at M&T Bank Corporation, a leading financial institution where innovation meets tradition, offering a plethora of job opportunities across various sectors. As one of the most respected banks in the nation, M&T Bank Corporation is the perfect place to jumpstart or advance your career in the financial services industry.

Work You’ll Do

At M&T Bank Corporation, you will be part of a culture that cherishes diversity, leadership, and professional growth. Engage in work that makes a real difference in the community while fostering your career development through comprehensive training programs and diverse learning opportunities.

Innovate and Lead

Embrace the chance to work on projects that integrate cutting-edge financial technologies with robust, traditional banking practices. M&T Bank Corporation is at the forefront of the financial industry, offering innovative solutions that redefine banking standards. Our leadership in the market is driven by a commitment to excellence and continuous improvement.

Career Growth and Opportunities

Whether you are looking for an entry-level position or a more senior role, M&T Bank Corporation provides a dynamic pathway for career advancement. With a variety of job opportunities ranging from internships to full-time positions, you can find the perfect match for your skills and ambitions. Our team is dedicated to helping you navigate your career path with tailored development plans and leadership training.

Join Our Team

Explore job opportunities and join a team that values hard work, creativity, and strategic thinking. M&T Bank Corporation is hiring professionals who are passionate about finance and eager to contribute to a team-oriented environment. Enhance your skills through hands-on experience and ongoing professional development.

Networking and Professional Development

At M&T Bank Corporation, networking and professional development are part of our DNA. Connect with industry leaders, participate in high-impact networking events, and take advantage of our mentorship programs. Our employees benefit from a supportive network that boosts their career trajectories and fosters meaningful professional relationships.

Benefits and Culture

Enjoy a comprehensive benefits package that supports both your professional and personal life. M&T Bank Corporation offers competitive salaries, health benefits, and retirement plans designed to ensure the well-being of our team members and their families. Experience a supportive and inclusive culture where every employee is valued and given the opportunity to thrive.

How to Apply

Ready to take the next step in your career? Visit the M&T Bank Corporation Careers page to browse current openings, submit your resume, and prepare for your interview. We are excited to see how your skills and ideas can contribute to our continued growth and success.

Stay Connected

Keep up to date with the latest from M&T Bank Corporation by following our careers blog. Gain insights from our experts and stay informed about new job openings and upcoming networking events. Join M&T Bank Corporation today and be part of a team that is dedicated to growth, innovation, and leadership in the banking industry. Your future starts here!
Learn more about M&T Bank Corporation
Size
17,115 employees
Market Cap
$25.2 billion
Industry
Net Income
$1.3 billion
Founded
1868
5 Year Trend
+0.2%
NASDAQ

Similar Jobs

More Jobs at M&T Bank Corporation

More Information Technology Jobs

Find similar Senior Application Security Engineer jobs: