Senior Application Security Engineer: Secure SDLC & Apps

Machine Learning Technologies, LLC; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

LPL Financial in New York, NY is seeking a Security Engineer to advance the Application Security program. You will work with development teams to review vulnerabilities, mentor engineers on secure development, and monitor CVEs to continually improve security posture.

The role focuses on securing web, mobile, APIs, databases, and containers across critical applications, with emphasis on building robust security across the software lifecycle.

Qualifications

• 10+ years of application security experience.
• 10+ years of experience performing manual testing of APIs and web applications to identify vulnerabilities.
• 10+ years of experience developing and maintaining enterprise security libraries, components, best practices checklists.
• 5+ years of experience performing application security risk evaluation, partnering with key stakeholders to enhance CI/CD security.
• 5+ years of experience creating and maintaining scan profiles for static, dynamic, IAST and 3rd party library analysis.
• 5+ years of experience reviewing and analyzing vulnerability scan results and tracking closure of vulnerabilities.

Responsibilities

• Perform as an application security SME in Web, Mobile, Databases, APIs, Containers and other domains.
• Support and maintain application security testing platforms and integrations with automation platforms.
• Review potential false positives and evaluate mitigating factors with Development teams.
• Produce and track application security metrics.
• Support secure development and testing of critical Advisor and Investor applications.
• Mentor and educate developers on secure development practices.
• Monitor CVEs and industry developments for continuous improvement.
• Collaborate with Internal Audit, IT Governance, IT Compliance and other stakeholders on projects.

Skills

Application security

API security

Web and mobile security testing

Vulnerability management

CI/CD security

Education

Bachelor's degree in Information Security/Engineering/CS

Tools

Synopsys

BlackDuck

J-Frog

PrismaCloud

Burp Suite

Postman

Job description

LPL Financial in New York, NY is seeking a Security Engineer to advance the Application Security program. You will work with development teams to review vulnerabilities, mentor engineers on secure development, and monitor CVEs to continually improve security posture.

The role focuses on securing web, mobile, APIs, databases, and containers across critical applications, with emphasis on building robust security across the software lifecycle.