Manager, Application Security Engineer

KPMG US; Santa Clara (CA); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is looking for a Manager, Application Security Engineer to enhance their application security practices. This role involves collaborating with development teams to integrate security into the software development lifecycle, conducting thorough code reviews, and performing threat modeling to identify potential risks. The ideal candidate will have a strong background in application development and IT security, with hands-on experience in various programming languages and security tools. Join a dynamic team committed to fostering a secure development environment and advancing your career in a supportive workplace.

Qualifications

• 4+ years of experience in application development and IT security.
• Experience with languages/frameworks like C#, ASP.NET, Python, Ruby, Go.

Responsibilities

• Collaborate with teams to incorporate security best practices into application design.
• Conduct source code reviews to identify security vulnerabilities.

Skills

Application Development

IT Security

C#

ASP.NET

Python

Threat Modeling

Penetration Testing

Education

Bachelor's Degree in Computer Science

Professional Security Certifications

Tools

GitHub Advanced Security

Fortify

Mend

Qualys

Microsoft Defender for Cloud

Job description

Join Our Team as a Manager, Application Security Engineer at KPMG US

KPMG is seeking a Manager, Application Security Engineer to join our Global Technology & Knowledge group, part of the KPMG International organization. Known for being a great place to work and build a career, KPMG provides audit, tax, and advisory services across various industries.

Responsibilities:

1. Collaborate with development teams to incorporate security best practices into application design and development.
2. Conduct manual and automated source code reviews to identify security vulnerabilities.
3. Perform application threat modeling to identify potential security risks.
4. Identify, track, and remediate vulnerabilities using security testing tools.
5. Work with Development, DevOps, and Infrastructure teams to automate security checks and promote secure coding practices.
6. Support security architects by generating reports on security posture, vulnerabilities, and metrics.

Qualifications:

• At least four years of recent experience in application development and IT security.
• Bachelor's degree in computer science, information technology, engineering, or equivalent work experience; professional security certifications preferred.
• Experience writing production-level code in languages/frameworks such as C#, ASP.NET, MVC, Python, Ruby, Go, etc.
• Knowledge of security tools like GitHub Advanced Security, Fortify, Mend, Qualys, Microsoft Defender for Cloud, etc.
• Strong communication skills, attention to detail, and experience in threat modeling, penetration testing, or red team operations is a plus.
• Must be authorized to work in the U.S. without visa sponsorship.

Additional details about salary ranges, benefits, and legal compliance are provided in the original description. KPMG is an equal opportunity employer and adheres to all applicable laws.