Senior Application Security Engineer — Secure SDLC & DevSecOps

LPL Financial; San Diego (CA); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial is seeking a Sr. Application Security Engineer to lead the Application Security program and strengthen defenses across Web, Mobile, APIs and databases. The role emphasizes collaboration with development teams and ongoing security enhancements.

The candidate will review vulnerabilities, mentor engineers, and monitor industry trends to continuously improve security posture within LPL’s Advisor and Investor platforms.

Qualifications

• 5+ years of application security experience.
• 5+ years of experience performing manual testing of APIs and web apps to identify vulnerabilities.
• 5+ years of experience developing and maintaining security libraries, components, checklists.

Responsibilities

• Serve as an application security SME in Web Apps, Mobile Apps, Databases, APIs, Containers and related domains.
• Support and maintain application security testing platforms and integrations with automation.
• Review potential false positives with Development teams and propose mitigations.
• Produce and track application security metrics.
• Support secure development and testing of Advisor and Investor LPL applications.
• Mentor engineers on secure development and security best practices.
• Monitor CVEs and industry developments and suggest improvements.
• Collaborate with Internal Audit, IT Governance, and IT Compliance on projects.

Skills

Application security

Web security

Vulnerability management

CI/CD security

Threat modeling

Education

Bachelor’s degree in Information Security/CS

Tools

Synopsys

BlackDuck

J-Frog

PrismaCloud

BurpSuite

Postman

Job description

LPL Financial is seeking a Sr. Application Security Engineer to lead the Application Security program and strengthen defenses across Web, Mobile, APIs and databases. The role emphasizes collaboration with development teams and ongoing security enhancements.

The candidate will review vulnerabilities, mentor engineers, and monitor industry trends to continuously improve security posture within LPL’s Advisor and Investor platforms.