Senior Application Security Lead — Attack Surface

Fidelity Information Services, LLC; Brown Deer (WI); On-site; USD 120,000 - 190,000; Full time

Job summary

Fidelity Information Services, LLC in the United States seeks a Senior Application Security Engineer to lead hands-on security efforts across web, API, mobile, and cloud-native apps.

You will perform deep assessments (SAST/DAST/SCA), perform threat modelling, IaC and container security, and drive secure development practices while guiding engineering teams to fix vulnerabilities at scale.

Qualifications

• Strong knowledge of application security practices.
• Experience conducting SAST/DAST/SCA assessments.
• Ability to review source code and perform threat modelling.

Responsibilities

• Own and continuously improve the application attack surface management program.
• Perform and oversee SAST and DAST in CI/CD pipelines.
• Conduct in-depth manual source code reviews across languages.
• Lead API security assessments for REST, GraphQL, gRPC and SOAP services.

Skills

Attack Surface Management

SAST

DAST

SCA

Threat Modelling

IaC Security

Container Security

Penetration Testing

Java

C#/.NET

Python

JavaScript/TypeScript

CI/CD Tooling

Tools

CI/CD Tooling

Job description

Fidelity Information Services, LLC in the United States seeks a Senior Application Security Engineer to lead hands-on security efforts across web, API, mobile, and cloud-native apps.

You will perform deep assessments (SAST/DAST/SCA), perform threat modelling, IaC and container security, and drive secure development practices while guiding engineering teams to fix vulnerabilities at scale.