Senior Application Security Engineer

About Our Client

The organization operates in the enterprise finance software industry, addressing the challenge of integrating financial and operational data to enhance decision-making and productivity for finance teams. It provides a unified platform that supports financial consolidation and enterprise performance management, aiming to digitize core financial functions and empower financial leaders to drive business strategy.

About the Opportunity

The Senior Application Security Engineer plays a critical role within the Information Security team by securing the organization's finance platform throughout the software development lifecycle. This position ensures that secure coding and development practices are defined and enforced, conducts rigorous application security testing to identify and mitigate vulnerabilities, and collaborates with engineering teams to integrate security into new features and platform design. The role contributes to protecting customers and maintaining the platform's security posture by providing clear guidance and developing custom security testing tools.

Responsibilities

• Perform manual and automated application security testing to identify vulnerabilities
• Conduct code analysis to assess application security
• Evaluate and enhance software development lifecycle security
• Collaborate with Development and Engineering teams to embed security practices
• Identify attack patterns and indicators of compromise with the Security team
• Design and maintain custom security testing tools
• Define and enforce secure development policies and standards
• Provide mentorship and technical guidance to junior Security team members
• Document and communicate security findings and risks
• Perform penetration testing on platform assets
• Conduct security architecture and design reviews
• Provide secure design and coding guidance throughout development

Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field with 8+ years in application security testing, penetration testing, or software development; or Master’s degree with 3+ years experience; or Associate degree with 12+ years experience
• 3+ years of hands-on threat modeling experience with actionable remediation
• Experience with C# and .NET secure coding and code review preferred
• Penetration testing experience for web applications preferred
• Knowledge of decompiling and reverse engineering .NET libraries preferred
• Familiarity with IT security, risk management, and compliance frameworks such as SOC 2 and FedRAMP preferred
• Offensive security certifications such as OSCP, GXPN, or GPEN preferred
• Strong written and verbal communication skills
• Highly organized with strong analytical and reasoning skills
• Ability to work independently and make sound decisions
• Comfortable collaborating with stakeholders including senior leadership
• Experience with financial consolidation or enterprise performance management platforms is a plus

Pay Range and Compensation Package

Gross annual base salary: USD 150,000 - 196,000
Additional variable compensation and benefits may apply, with total compensation based on experience, skills, and location

Benefits & Perks

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k)