Key Responsibilities

• Implement, administer, and continuously improve application security tooling supporting secure software development.
• Integrate security testing and security controls into software delivery pipelines and engineering workflows.
• Develop, maintain, and enhance application security standards, policies, procedures, documentation, and operational guidance.
• Analyze security findings, operational metrics, and compliance trends to identify improvement opportunities and areas of elevated risk.
• Partner with engineering teams to improve security adoption and enable secure-by-design and secure-by-default development practices.
• Support secure SDLC governance, vulnerability management, and remediation tracking activities.
• Collaborate with cybersecurity, architecture, platform, and engineering stakeholders to improve overall application security maturity.
• Contribute to security automation initiatives that increase operational efficiency and reduce manual effort.
• Support the secure implementation of emerging software development practices, including AI-assisted development workflows.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 5+ years of application security engineering experience.
• Experience implementing and administering application security platforms, including SAST, DAST, SCA, IAST, container security, API security testing, and software supply chain security capabilities.
• Experience securing APIs across the development lifecycle, including API discovery, authentication and authorization validation, schema and contract testing, abuse-case analysis, OWASP API Security Top 10 risks, and remediation guidance.
• Experience integrating security tooling and automated security controls into CI/CD pipelines using infrastructure-as-code (IAC).
• Experience supporting secure SDLC governance, policy enforcement, compliance reporting, and remediation management.
• Working knowledge of application security principles, secure coding practices, OWASP Top 10 risks, and common vulnerability remediation techniques.
• Experience developing and maintaining technical standards, procedures, policies, and security documentation.
• Strong written and verbal communication skills with the ability to influence technical stakeholders.
• Ability to independently manage moderately complex security initiatives and contribute to broader cybersecurity objectives.

Preferred Qualifications

• Industry certifications such as CSSLP, GSEC, CISSP, GWAPT, or similar.
• Experience supporting financial services, banking, or other highly regulated environments.
• Experience assessing, implementing, and governing security controls for AI-assisted software development workflows, including secure use of code-generation tools, prompt and output handling, developer guardrails, and risk monitoring.
• Experience with security automation, scripting, and workflow orchestration.
• Experience creating executive, engineering, or operational security metrics and dashboards.