Cybersecurity - Standard - Security Engineer Level: Senior
Two openings for this job...
Position #1: Senior Application Security Engineer - Policy & Platform
Senior Application Security Engineer to provide technical expertise across the Application Security platform portfolio. The AppSec Engineer will support AppSec tooling, policy implementation, vulnerability analysis, false-positive validation, platform escalations, and developer enablement activities.
Required Qualifications:
Deep understanding of Secure SDLC and Application Security practices
Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing
Experience administering and supporting AppSec platforms and security tooling
Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments
Experience providing secure coding guidance and remediation support to development teams
Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls
Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations
Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials
Position #2: Senior Application Security Engineer - Governance & Enablement
Position #2 Overview:
Senior Application Security Engineer to support Application Security governance, reporting, program coordination, and cross-functional enablement activities. The AppSec Engineer will also help support and maintain operational execution across the AppSec program.
Required Qualifications:
Experience supporting enterprise Application Security or cybersecurity governance programs
Experience developing security metrics, dashboards, key performance indicators, and executive reporting
Familiarity with vulnerability management, software supply chain security, and Secure SDLC governance
Strong understanding of cybersecurity policies, standards, procedures, and regulatory expectations
Experience coordinating across security, engineering, technology, risk, and compliance organizations
Strong written and verbal communication skills with both technical and executive stakeholders
Experience with reporting and workflow platforms such as Power BI, ServiceNow, Jira, or equivalent tools
Experience leveraging automation and AI capabilities to improve reporting, governance, and operational processes
Certifications such as CISSP, CISM, Security+, or equivalent industry-recognized credentials