Senior Application Security Engineer - Build Secure Apps

LPL Financial LLC; Town of Charlotte, Fort Mill (NY, SC); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial is seeking a Sr. Application Security Engineer to help develop, mature, and sustain the Application Security program.

You will collaborate with Development teams to review vulnerabilities, mentor engineers, and monitor CVEs while driving secure development practices across Advisor and Investor applications. The role emphasizes expertise in web, mobile, databases, APIs, and containers, with a strong focus on metrics, automation, and continuous improvement within a fast-paced

Qualifications

• 5+ years of application security experience.
• 5+ years of API and web application security testing experience.
• 5+ years building and maintaining enterprise security libraries, components, and checklists.
• 5+ years evaluating application security risk and improving CI/CD security posture.
• 5+ years creating and maintaining scan profiles for static, dynamic, and SCA analysis.
• 5+ years reviewing vulnerability scan results and tracking closure.

Responsibilities

• Perform as an application security SME in Web Applications, Mobile Applications, Databases, APIs, Containers and other domains.
• Support and maintain application security testing platforms and develop integrations with automation platforms.
• Work with Development teams to review potential false-positive results and mitigating factors.
• Produce and track application security metrics.
• Support the secure development and testing of Advisor and Investor LPL applications.
• Mentor and educate product development and quality engineers on secure development practices.
• Monitor CVEs and industry developments for continuous improvement.
• Collaborate with Internal Audit, IT Governance, IT Compliance on projects.

Skills

Application security

API security testing

Web/mobile/app security

CI/CD security

Vulnerability management

Education

Bachelor’s Degree or equivalent in Information Security, Engineering or Computer Science

Tools

Synopsys

BlackDuck

J-Frog

PrismaCloud

API scanners

Burpsuite

Postman

Job description

LPL Financial is seeking a Sr. Application Security Engineer to help develop, mature, and sustain the Application Security program.

You will collaborate with Development teams to review vulnerabilities, mentor engineers, and monitor CVEs while driving secure development practices across Advisor and Investor applications. The role emphasizes expertise in web, mobile, databases, APIs, and containers, with a strong focus on metrics, automation, and continuous improvement within a fast-paced