Sr. Application Security Engineer
LPL Financial28 days ago
Austin, TX, USA +3 moreSenior
Base Salary
$101k - $168k/yr
Responsibilities
- Serve as an application security subject matter expert for web applications, mobile applications, databases, APIs, containers, and related domains.
- Support and maintain application security testing platforms and develop integrations with automation platforms.
- Review potential false-positive scan results with application development teams and evaluate proposed mitigations.
- Produce and track application security metrics and vulnerability closure.
- Support secure development and testing of critical Advisor and Investor applications.
- Mentor and educate product development and quality engineers on secure development and security best practices.
- Monitor CVEs and industry developments and provide input for continuous improvement.
- Collaborate with Internal Audit, IT Governance, IT Compliance, and other stakeholder groups.
Requirements
- At least five years of application security experience.
- At least five years of manual testing experience for APIs and web applications to identify and validate vulnerabilities.
- At least five years of experience developing and maintaining enterprise security libraries, components, and best-practice checklists.
- At least five years of experience evaluating application security risk and enhancing application security posture in partnership with stakeholders.
- At least five years of experience creating and maintaining scan profiles for static, authenticated dynamic, IAST, and third-party library analysis.
- At least five years of experience reviewing vulnerability scan results and tracking vulnerability closure.
- Knowledge of OWASP Top 10 risks, secure coding, secure SDLC, secure architecture, and DevSecOps.
- Strong analytical, interpersonal, and communication skills.
- Bachelor’s degree or equivalent in Information Security, Engineering, or Computer Science is preferred.
- Preferred experience includes application development, security engineering or architecture, application security scanning tools, C#, Java, HTML, CSS, JavaScript, React, Angular, and DevSecOps pipelines.
Benefits
- Hybrid work arrangement, indicated by the #LI-Hybrid designation.
- Pay range of $100,631.00 to $167,787.00 in base salary.
- 401(k) matching, health benefits, employee stock options, paid time off, and volunteer time off.
Tech Stack
Categories