Senior Application Security Engineer New New York, New York, United States

Secure Identity, LLC.; New York (NY); On-site; USD 170,000 - 215,000; Full time

Job summary

Join a forward-thinking company as a Senior Application Security Engineer, where your expertise will play a crucial role in enhancing security measures across various platforms. This position offers the opportunity to lead penetration tests, automate security assessments, and collaborate with diverse teams to foster a security-first culture. With a focus on continuous improvement and innovation, you will help shape the future of secure software development. Enjoy a vibrant work environment with comprehensive benefits, including flexible time off and wellness stipends, while making a significant impact in the tech industry.

Benefits

Comprehensive healthcare plans

Flexible time off

Catered lunches

Wellness stipend

401(k) retirement plan with employer match

Free OneMedical memberships

CLEAR Plus membership

Learning & development stipends

Qualifications

• 5+ years of experience in software development and security integration.
• Expert knowledge of OWASP Top 10 and secure code remediation.
• Strong understanding of security tools and architecture.

Responsibilities

• Conduct security assessments and penetration tests on applications.
• Automate security testing and integrate into CI/CD pipelines.
• Collaborate with teams to ensure security in software development.

Skills

Application Security

Penetration Testing

Secure Coding

Threat Modeling

Interpersonal Communication

Software Security Architecture

CI/CD

Vulnerability Assessment

Education

Bachelor's Degree in Computer Science or related field

Tools

Burp Suite

Metasploit

OWASP ZAP

nmap

Frida

DAST

SAST

IAST

RASP

WAF

Job description

Have you ever had that green-light feeling? When you hit every green light and the day just feels like magic. CLEAR's mission is to create frictionless experiences where every day has that feeling. With more than 30+ million passionate members and hundreds of partners around the world, CLEAR’s identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or right on your phone, CLEAR connects you to the things that make you, you - unlocking easier, more secure, and more seamless experiences - making them all feel like magic.

We are looking for a Senior Application Security Engineer to join our growing team. As a Senior Application Security Engineer, you will have the opportunity to take your penetration and overall application security testing to the next level. Our team performs everything from biometric and Web security testing to remediation, as well as creating automated security products, enabling stakeholders across CLEAR to deliver secure software.

What you'll do:

• Partner with the company’s Product, Software Engineering, DevOps, and IT teams
• Perform security risk assessments, manual penetration security testing, automate security testing, threat modeling, and develop/conduct education on secure coding
• Deliver security products and consult with DevOps, as part of a high-profile security team, supporting automated security testing as part of CLEAR’s next-generation CI/CD pipelines
• Lead internal and external penetration tests across CLEAR’s most critical assets, as well as triage issues with internal stakeholders for remediation
• Develop functional and non-functional security requirements
• Conduct security assessments, code reviews, and penetration tests to identify vulnerabilities in applications and software
• Implement and manage security tools, including SAST, DAST, SCA, and other security automation frameworks

How you'll measure success:

• Effective implementation of security measures within the software development lifecycle, ensuring security is considered at every stage
• Implementation of automated security testing tools and processes that streamline security assessments and minimize manual effort
• Effective partnerships with engineering, DevOps, and product teams to create a security-first culture without hindering development velocity
• Continuous improvement of application security programs, policies, and frameworks based on evolving threats and industry trends

What you're great at:

• Minimum of 5 years of experience in software development and implementing security into SDLC processes; Minimum 2 years relevant architecture experience with expert level knowledge of application systems design and integration
• Comprehensive knowledge, experience, & understanding of testing for the OWASP Top 10 or CWE Top 25, including PoCs, automating attacks, and secure code remediation
• Excellent interpersonal communication skills. Can explain very technical topics to all audiences and break down vulnerabilities to both developers and leadership
• Strong understanding of Software Security Architecture and Design, SDLC, CI/CD, and the ability to clearly articulate best practices for application security
• Experience with evaluating, deploying, and managing application security tools (e.g. DAST, SAST, IAST, RASP, WAF) and building strong vendor relationships
• Familiarity with one or more industry standards and regulations such as PCI, NIST 800-53, FedRAMP and ISO27001
• Experience using security testing tools such as Burp Suite, Metasploit, OWASP ZAP, nmap, Frida, etc.
• Experience with mobile platform-specific security, privacy, and permission concepts for iOS & Android mobile platforms as well as mobile technologies such as WebViews, TouchID/FaceID API, etc.

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs.

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The base salary range for this role is $170,000 - $215,000, depending on levels of skills and experience.

The base salary range represents the low and high end of CLEAR’s salary range for this position. Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance. The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock Units

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

#LI-Onsite

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

This role is based out of our Headquarters in NYC and has a 5 days in-office expectation. Are you comfortable with this schedule? * Select...

Are you authorized to work in the United States? * Select...

Will you require CLEAR to sponsor you for a work permit now or in the future in the United States? * Select...

LinkedIn Profile

Website

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.

How would you describe your gender identity? (mark all that apply) Select...

How would you describe your racial/ethnic background? (mark all that apply) Select...

How would you describe your sexual orientation? (mark all that apply) Select...

Do you identify as transgender? Select...

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? Select...

Are you a veteran or active member of the United States Armed Forces? Select...