Senior Application Security Architect

Epsilon; Boston (MA); On-site; USD 112,800 - 209,600; Full time

Job summary

Epsilon is seeking an experienced Application Security professional to help ensure the secure delivery of its software by designing secure coding practices and conducting advanced security testing. You will lead threat modeling and security architecture reviews while guiding multiple teams toward secure development lifecycle practices.

You will collaborate across development teams, automate security within CI/CD, and drive improvements to stay ahead of evolving threats, ultimately protecting the

Qualifications

• BS / MS in Computer Science or similar degree.
• Minimum of 10 years of experience in related fields.
• Direct experience in software development.
• Direct experience with at least one or more CI/CD platforms.
• Direct experience with application testing (SAST, DAST, MAST, RAST, IAST).
• Direct experience in application vulnerability management processes.
• Working knowledge of current software development methodologies.
• Working knowledge of OWASP Top 10 and CWE 25.
• Working knowledge of programming languages and scripting.
• Working knowledge of software design lifecycle.
• Working knowledge of web and app security stack (e.g., API security).
• Working knowledge of cloud security concepts and technologies.
• Working knowledge of authentication and authorization flows in web applications.
• Strong understanding of threat modeling.
• Strong understanding of network security (e.g , WAF, Micro-segmentation)
• Strong understanding of cryptography topics

Responsibilities

• Perform code analysis of applications, manually and through application security testing solutions, to identify vulnerabilities.
• Provide context and rationalization for identified vulnerabilities.
• Review and recommend remediation actions for identified vulnerabilities.
• Drive and support security architecture design reviews and threat modeling of our products.
• Improve the accessibility of security through automation, vulnerability exception processing, embedding secure practices within continuous integration pipelines, and other related activities.
• Build trust relationships with teams to effectively achieve security goals.
• Drive cross-disciplinary initiatives to improve the security of our engineering ecosystem and products.
• Contribute to relevant security standards, processes, and other formal documentation.
• Collaborate with teams to ensure understanding and compliance with relevant security policies, standards, and best practices.
• Assist in onboarding new teams and applications to security platforms.

Skills

Code analysis

Application security testing

Threat modeling

Security architecture

CI/CD platforms

OWASP Top 10

Web security

Education

BS/MS CS degree

Tools

SAST tools

DAST tools

IAST

MAST

RAST

Job description

Epsilon is seeking an experienced Application Security professional to help ensure the secure delivery of its software by designing secure coding practices and conducting advanced security testing. You will lead threat modeling and security architecture reviews while guiding multiple teams toward secure development lifecycle practices.

You will collaborate across development teams, automate security within CI/CD, and drive improvements to stay ahead of evolving threats, ultimately protecting the