Senior Application Security Lead – Attack Surface

Fidelity Information Services, LLC; Milwaukee (WI); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Modern international work environment

Professional education opportunities

Challenging financial services tech

Flexible, collaborative culture

Descripción de la vacante

Fidelity Information Services, LLC is seeking a Senior Application Security Engineer to lead hands-on security assessments across web, API, mobile, and cloud-native applications. You will shape encryption standards, secure SDLC practices, and risk-based security priorities with engineering teams.

You will perform SAST/DAST, manual code reviews, threat modeling, and AI-enabled security initiatives while partnering with DevOps and product teams to fix vulnerabilities at scale.

Formación

• 9+ years of experience in software development and application security.
• Hands-on with SAST, DAST, SCA, API security, code review, threat modeling, and container security.
• Proficient in Burp Suite Pro, Checkmarx, OWASP ZAP, and other security tooling.
• Strong knowledge of PCI DSS and secure SDLC practices.

Responsabilidades

• Own and improve the application attack surface management program across apps, APIs, mobile, and cloud assets.
• Lead SAST/DAST, tune rules, triage findings and integrate scanning into CI/CD pipelines.
• Perform deep manual source code reviews across Java, C#/.NET, Python, JavaScript/TypeScript, Cobol, Go and Kotlin/Swift.
• Lead API security assessments for REST, GraphQL, gRPC and SOAP services; enforce proper authz/authn and OWASP API Top 10.
• Facilitate threat modeling sessions and translate results into actionable security requirements.

Conocimientos

SAST

DAST

SCA

API security

Code review

Threat modeling

CI/CD integration

Pen testing

Herramientas

Burp Suite Pro

Checkmarx

OWASP ZAP

Postman

AppScan

WebInspect

Fortify

Veracode

Semgrep

MobSF

Frida

Ghidra

Xcode/Android Studio

Docker

Kubernetes

Checkov

tfsec

Snyk Container

Descripción del empleo

Fidelity Information Services, LLC is seeking a Senior Application Security Engineer to lead hands-on security assessments across web, API, mobile, and cloud-native applications. You will shape encryption standards, secure SDLC practices, and risk-based security priorities with engineering teams.

You will perform SAST/DAST, manual code reviews, threat modeling, and AI-enabled security initiatives while partnering with DevOps and product teams to fix vulnerabilities at scale.