Senior Application Security Engineer

Madison-Davis, LLC; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Madison-Davis, LLC is seeking a Senior Application Security Engineer to lead hands-on security initiatives across the software development lifecycle. The role blends DevSecOps engineering, security automation, vulnerability assessment, API protection, and third-party software analysis to strengthen software security controls and trust.

The engineer will partner with application development and security teams to embed security into CI/CD, perform testing, evaluate third‑party components, and

Qualifications

• Hands-on application security or DevSecOps experience.
• Proficient in Python for security engineering.
• Experience with SAST/DAST, API security, and WAF.

Responsibilities

• Embed automated application security checks into CI/CD pipelines.
• Collaborate with developers on secure coding, code reviews, and threat modeling.
• Perform static and dynamic application security testing.
• Identify vulnerabilities and drive remediation with stakeholders.
• Evaluate third-party software, source code, dependencies, and binaries.
• Contribute to software trust validation and secure software approvals.
• Assess API vulnerabilities and support WAF management.
• Incorporate threat intelligence into software risk assessments.
• Coordinate penetration testing activities and vendor engagement.

Skills

DevSecOps

Python

SAST/DAST

API security

WAF

Threat modeling

CI/CD

GitHub security tooling

Secure SDLC

Threat intelligence

Tools

GitHub Security

WAF management

CI/CD tooling

Job description

A financial institution is seeking a Senior Application Security Engineer to lead hands-on application security initiatives across the software development lifecycle.

This role combines DevSecOps engineering, security automation, vulnerability assessment, API protection, and advanced third-party software analysis.

The engineer will work closely with application development and security teams to strengthen software security controls and improve application trust.

RESPONSIBILITIES

• Embed automated application security checks into CI/CD pipelines.
• Collaborate with developers on secure coding, code reviews, and threat modeling.
• Perform static and dynamic application security testing.
• Identify application vulnerabilities and work with stakeholders on remediation.
• Evaluate third-party software, source code, software dependencies, and compiled applications.
• Contribute to software trust validation and secure software approval processes.
• Assess API vulnerabilities and support WAF management.
• Incorporate threat intelligence into software risk assessments.
• Coordinate penetration testing activities and external vendor engagement.

Role Requirements

• Hands-on Application Security or DevSecOps experience.
• CI/CD integration and secure software development knowledge.
• Python proficiency relevant to security engineering.
• SAST and DAST experience.
• API security and WAF knowledge.
• GitHub security tooling experience.
• Secure SDLC, threat modeling, and vulnerability management.
• Experience with third-party software risk, software composition analysis, or binary analysis.
• Knowledge of software supply chain security and threat intelligence.
• AI knowledge and strong communication skills.

PREFERRED EXPERIENCE Banking or financial services background.Mandarin language skills.