Senior Application Security Engineer

Job Description

Lawrence Harvey has partnered with a Financial Services firm in search for an Application Security professional to join their team.

\n

\n

Responsibilities:

\n

\n
• Conduct dynamic application security testing (DAST) and software composition analysis (SCA) scans to identify and address vulnerabilities.

\n

• Collaborate with development teams to triage and remediate security findings from static (SAST), dynamic (DAST), and composition (SCA) scans.

\n

• Help build the Security Champions program, promoting secure coding practices, patterns, and standards across our development teams.

\n

• Integrate threat modeling into the software development lifecycle (SDLC), creating and maintaining models to anticipate and mitigate potential risks.

\n

• Stay ahead of emerging security threats and industry best practices, continuously enhancing our security posture.

\n

• Evaluate and select cutting-edge application security tools, processes, and standards.

\n

\n

\n

Experience preferred:

\n

\n
• Strong well-rounded background in cybersecurity, specifically within Application Security; ideally 5+ years in such role

\n

• Hands-on experience with DAST tools and familiarity with SCA tools.

\n

• Strong understanding of common vulnerabilities and familiarity with OWASP Top 10

\n

• Ability to define, initiate and lead an Application Security program

\n

• Experience threat modeling, reviewing code, remediating vulnerabilities

\n

• Proficiency in at least one programming language - ideally: Python, Java, Javascript

\n

• Experience leveraging AI/LLM tools for automation

\n

\n

\n

Preferred qualifications:

\n

\n
• Degree in Tech discipline: Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent

\n

• Certifications: CISSP, CEH, CSSLP

\n

\n

\n

Please note:

\n

\n
• The client is unable to transfer or sponsor visas at this time; US Citizen or GC only

\n

• NO C2C

\n