Application Security Engineer
Sumitomo Mitsui Banking Corporation3 days ago
Tralee, IrelandSenior
Responsibilities
- Work with developers to identify, explain, and remediate code vulnerabilities before production release.
- Manage and report findings from SAST, SCA, DAST, IAST, and container security scanning.
- Collaborate with development, security architecture, and vulnerability management teams on remediation, best practices, threat modeling, and SLA validation.
- Manage remediation efforts, security champions, and application developer outreach programs.
- Publish and present management reports on the application security program across Americas Division entities.
- Perform manual testing to validate vulnerabilities and penetration-testing findings.
- Write code fixes and automation scripts supporting internal cybersecurity projects.
- Develop and mature CI/CD pipelines for code quality and vulnerability detection.
- Create detailed application security process documentation.
Requirements
- 7+ years of experience as an application security analyst or application penetration testing analyst.
- 4+ years of experience with Static Application Security Testing or Dynamic Application Security Testing.
- 2+ years of experience with container security issues and container technologies.
- Strong expertise with C#, C++, Java, Python, and .NET.
- Ability to read and understand code deficiencies and write code fixes for stakeholders.
- Strong understanding of the Secure Software Development Lifecycle, OWASP Top 10, CWE, common software threats, and mitigations.
- Experience managing remediation efforts, security champions, developer outreach, vulnerability validation, and application security programs.
- Experience developing and maturing CI/CD pipelines for code quality and vulnerability detection.
- Experience with Jira and Confluence.
- Ability to create detailed process documentation and work in a process- and detail-oriented manner.
- Bug bounty and/or penetration testing experience is a bonus.
Benefits
- Hybrid work arrangement with the opportunity to work from home and from the SMBC office.
- Employees must live within a reasonable commuting distance of the office location.
- Occasional weekend and night work may be required based on project, support, and business needs.
- Reasonable accommodations are available during the candidacy and application process for applicants with disabilities.