Senior Application Security Engineer
Sumitomo Mitsui Banking Corporation27 days ago
Tralee, IrelandSenior
Responsibilities
- Work with developers and stakeholders to explain code vulnerabilities and remediation fixes.
- Ensure application code is scanned and reported across SAST, SCA, DAST, IAST, and container security areas.
- Interface with development, security architecture, and vulnerability management teams on remediation, best practices, threat modeling, and SLA validation.
- Manage remediation efforts, security champion programs, and application developer outreach.
- Publish and present management reports on the state of the application security program.
- Perform manual testing to validate vulnerability or penetration testing findings.
- Write code fixes and automation scripts for internal cybersecurity projects.
- Support secure software development lifecycle practices and improve vulnerability detection in development pipelines.
Requirements
- At least 7 years of experience as an application security analyst or application penetration testing analyst.
- At least 4 years of experience with Static Application Security Testing or Dynamic Application Security Testing.
- At least 2 years of experience with container security issues and container technologies.
- Strong development experience and the ability to read, explain, and fix code deficiencies.
- Experience with C#, C++, Java, Python, and .NET.
- Experience developing and maturing CI/CD pipelines for code quality and vulnerability detection.
- Strong understanding of the Secure Software Development Lifecycle, OWASP Top 10, CWE, software threats, and mitigations.
- Experience with Jira and Confluence.
- Bug bounty and/or penetration testing experience is a bonus.
- Ability to create detailed process documentation and work in a process- and detail-oriented manner.
Benefits
- Hybrid workforce model with work from home and SMBC office options.
- Weekly attendance at the Tralee office is required, and employees must live within a reasonable commuting distance.
- Occasional weekend and night work may be required based on project, support, and business needs.
- Reasonable accommodations are available during the candidacy process for applicants with disabilities.
About Sumitomo Mitsui Banking Corporation
Sumitomo Mitsui Banking Corporation provides corporate, investment, and commercial banking services—such as lending, capital markets, global trade finance, treasury/FX, and transaction banking—to corporate, institutional, and consumer clients. Headquartered in Tokyo, it is the core banking subsidiary of Sumitomo Mitsui Financial Group (SMFG), one of Japan’s three major banking groups, whose shares trade in Tokyo and as NYSE ADRs (SMFG). SMBC serves clients through a network spanning nearly 40 countries.