Senior Application Security Engineer (DevSecOps)

Robotic Technologies Automation; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

LPL Financial is seeking a seasoned Security Engineer to help develop, mature, and sustain the Application Security program across the firm. The role focuses on securing web, mobile, API, and container platforms, driving secure development and testing practices within the AD/Investor applications.

Responsibilities include evaluating vulnerabilities, maintaining testing tools, and mentoring developers on secure coding. Strong collaboration with Internal Audit and IT Governance is required.

Qualifications

• 10+ years of application security experience.
• 10+ years of experience performing manual testing of APIs and web applications to identify vulnerabilities.
• 10+ years of experience developing and maintaining enterprise security libraries and checklists.
• 5+ years of experience performing security risk evaluation and improving CI/CD security posture.
• 5+ years of experience with static, dynamic, IAST, and third-party library analysis tools.

Responsibilities

• Serve as an application security SME across Web, Mobile, Databases, APIs, and Containers.
• Support and maintain application security testing platforms and integrations.
• Review potential false positives and mitigations with development teams.
• Produce and track application security metrics.
• Mentor teams on secure development practices and DevSecOps.

Skills

Application security

Web applications

APIs

CI/CD

Threat modeling

Communication

Education

Bachelor's degree in Information Security or Computer Science

Tools

Burp Suite

Synopsys

Black Duck

J-Frog

Postman

PrismaCloud

API scanners

Job description

LPL Financial is seeking a seasoned Security Engineer to help develop, mature, and sustain the Application Security program across the firm. The role focuses on securing web, mobile, API, and container platforms, driving secure development and testing practices within the AD/Investor applications.

Responsibilities include evaluating vulnerabilities, maintaining testing tools, and mentoring developers on secure coding. Strong collaboration with Internal Audit and IT Governance is required.