Principal Application Security Engineer

Mindlance

Charlotte (NC)

Hybrid

USD 110,208 - 137,760

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A leading company in the financial services sector is looking for an experienced Principal Application Security Engineer to spearhead their Application Security program. This role requires a strategic mindset along with hands-on experience in DevSecOps and leading security initiatives. You will collaborate on achieving robust application security while ensuring agile delivery in a hybrid work environment.

Qualifications

Deep expertise in network security, software development, and automated code review.
Experience in secure DevOps, cloud security with GCP and Azure.
Strong understanding of security frameworks and best practices.

Responsibilities

Drive strategic efforts in Application Security and lead engineering projects.
Implement Application Security controls in CI/CD pipelines.
Analyze security issues and define mitigation plans.

Skills

Security analysis

Application Security

DevSecOps

Threat modeling

Vulnerability assessments

Education

10+ years of Engineering experience

Certifications: CISSP, CSSLP, CASP+, CASE, GSEC

Tools

Checkmarx

Fortify

Semgrep

CI/CD pipelines

Job description

This range is provided by Mindlance. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$80.00/hr - $100.00/hr

Direct message the job poster from Mindlance

Please find details for this position below:

Title: Principal Application Security Engineer / Principal AppSec Security Engineer / Senior Security Architect

Location: Charlotte, NC – Hybrid Roles

Duration: 12+ Month (s) Extend or Convert based on performances

Job Descriptions:

Required Qualifications:

10+ years of Engineering experience, Drive strategic efforts and lead engineering projects the Application Security program. The ideal candidate should have a proven track record of successfully implementing Application Security controls and capabilities in CI / CD pipelines and driving agile Application Security outcomes (DevSecOps).
This person will be an industry-leading Subject Matter Expert (SME) in the Application Security domain. This individual will possess a mindset focused on creating proactive, preventative, and predictable solutions.

Desired Qualifications:

Deep hands-on technical expertise in at least two of the following areas: network security, embedded/hardware security, cryptography, web and network protocols, data structures and algorithms, software development, threat modeling, pen tests, or vulnerability assessments
10+ years of experience in identifying security issues and risks, and developing mitigation plans
7 + years – Development experience in more than one language (preferred Java or C# & .NET CORE development experience including the development of RESTful APIs)
5+ years of automated / manual code review – secure code review, security peer review, static analysis (Checkmarx, Fortify, Semgrep, manual code review)
5+ years of experience with secure DevOps and deployment automation
5+ years – CI/CD integration experience
Experience with supply chain security, Software Composition Analysis, and container security
Experience with Dynamic Analysis Security Testing (DAST)
Experience with Artificial Intelligence security with a focus on Machine Learning and GenAI
Experience with SDLC and Agile methodologies
Experience with GCP and Azure security
Desired certifications: CISSP, CSSLP, CASP+, CASE, GSEC
Expert knowledge and understanding of information security practices and policies, including Information Security Frameworks, Standards,
and best practices
Experience with defining security requirements

EEO:

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.

Seniority level