Senior Application Security Engineer: Secure DevOps & APIs

LPL Financial; Austin (TX); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial is seeking a Sr. Application Security Engineer to help grow and sustain the company's application security program. This role focuses on securing web, mobile, APIs, databases, and containers and requires collaboration with multiple engineering teams to mitigate risks.

The position emphasizes hands-on security testing, automation integrations, and mentoring developers on secure coding practices to strengthen our defense posture and protect client assets.

Qualifications

• 5+ years of application security experience.
• 5+ years of experience performing manual testing of APIs and web applications to identify/validate vulnerabilities.
• 5+ years of experience developing and maintaining enterprise security libraries, components, best practices checklists.
• 5+ years of experience performing application security risk evaluation and partnering with stakeholders to enhance CI/CD pipelines.
• 5+ years of experience creating and maintaining scan profiles for static, dynamic, IAST and 3rd party library analysis.

Responsibilities

• Serve as an application security SME across Web, Mobile, Databases, APIs and Containers.
• Maintain and integrate testing platforms with automation.
• Review scan results with Development teams and propose mitigations.
• Produce and track application security metrics.
• Secure development and testing of critical Advisor/Investor applications.
• Mentor engineers on secure coding practices.
• Monitor CVEs and industry trends to drive improvements.
• Collaborate with Audit, IT Governance, and Compliance on projects.

Skills

Application security

APIs testing

Vulnerability management

CI/CD

OWASP Top 10

Education

Bachelor's degree or equivalent in Information Security/Engineering or CS

Tools

Synopsys

BlackDuck

JFrog

PrismaCloud

Burp Suite

Postman

Job description

LPL Financial is seeking a Sr. Application Security Engineer to help grow and sustain the company's application security program. This role focuses on securing web, mobile, APIs, databases, and containers and requires collaboration with multiple engineering teams to mitigate risks.

The position emphasizes hands-on security testing, automation integrations, and mentoring developers on secure coding practices to strengthen our defense posture and protect client assets.