Senior Application Security Specialist
Wintrust Financial Corporation1 day ago
Base Salary
$117k - $158k/yr
Responsibilities
- Lead application threat modeling, security architecture reviews, and manual code reviews.
- Define authentication, authorization, data protection, and secure-design requirements for web applications, APIs, and cloud-hosted services.
- Implement and tune SAST and SCA with Checkmarx and integrate DAST, secrets scanning, and risk-based security gates into CI/CD pipelines.
- Support API discovery, posture assessment, security testing, and runtime monitoring using the enterprise API security toolset.
- Investigate sensitive-data exposure, broken authorization, and API abuse with application owners and security operations.
- Design AI-assisted SDLC workflows for code review, unit and integration test generation, security testing, vulnerability triage, and remediation.
- Establish human review, source-code and data protection, and validation processes for AI-generated code and tests.
- Drive vulnerability remediation based on exploitability, exposure, and business impact; validate fixes and support incident response.
- Track testing coverage, remediation times, and recurring defects for risk and compliance reporting.
- Coach developers on secure coding and maintain reusable security patterns and guidance.
- Evaluate AI workflow adoption, finding quality, test coverage, and time savings.
Requirements
- 5–7 years of relevant experience in application security, cybersecurity, secure development, or DevSecOps.
- Bachelor’s degree or equivalent; Computer Science or Cybersecurity is preferred.
- Experience with threat modeling, manual code review, API testing, vulnerability remediation, and Git-based CI/CD integration.
- Ability to review Java, Apex, and/or Python code and build automation.
- Knowledge of the OWASP Top 10, API Security Top 10, ASVS, authentication, authorization, OAuth/OIDC, and secrets management.
- Application security, cybersecurity, and/or Artificial Intelligence certifications are preferred.
- Preferred experience implementing AI-assisted SDLC workflows with measurable results, validating AI-generated code and tests, protecting sensitive data, and using Checkmarx, Akamai API Security, or comparable tools.
- Experience communicating risk and supporting regulated financial services.
Benefits
- Medical, dental, vision, life, disability, accidental death and dismemberment, critical illness, and accident insurance.
- Traditional and Roth 401(k) with company match, flexible spending account, employee stock purchase plan with a 5% discount, and tuition reimbursement.
- Parental leave, employee assistance program, transportation and commuting benefits, banking benefits, and pet insurance.
- Eligible for an annual bonus in addition to the stated salary range.
About Wintrust Financial Corporation
Wintrust Financial Corporation is a public bank holding company offering community banking, wealth management, and specialty finance to consumers, businesses, and institutions. Founded in 1991 and headquartered in Rosemont, Illinois, it trades on NASDAQ (WTFC), operates 175+ locations, and provides services including commercial insurance premium financing, short-term accounts receivable financing, and treasury management.