Senior AppSec Engineer — CI/CD Security & Testing

BridgeView; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

BridgeView is seeking a hands‑on Application Security Engineer to strengthen the application security program for a leading financial services organization. The role focuses on testing web applications and APIs, validating vulnerabilities, improving security tools, and partnering with developers on remediation.

You will review findings, support SAST/DAST/IAST, and integrate security tooling into CI/CD pipelines while advising teams on secure coding practices.

Qualifications

• 5+ years of application security experience.
• 5+ years of manual web application and API security testing.
• Strong knowledge of OWASP Top 10, secure SDLC, and DevSecOps.
• Experience with vulnerability assessment and remediation.
• Experience configuring application security scanning tools and integrating them with CI/CD pipelines.
• Strong communication skills and the ability to partner with developers.

Responsibilities

• Manually test web applications and APIs for security vulnerabilities
• Review scan results, validate findings and track remediation
• Support SAST, DAST, IAST, and third‑party library scanning
• Integrate application security tools into CI/CD pipelines
• Advise development teams on secure coding and application security best practices
• Monitor CVEs and produce application security metrics

Skills

Manual testing

Web testing

API testing

OWASP Top 10

Secure SDLC

DevSecOps

CI/CD integration

Vulnerability assessment

Communication with developers

Education

Bachelor’s degree

Tools

Burp Suite

Postman

Synopsys

Black Duck

JFrog

Prisma Cloud

Job description

BridgeView is seeking a hands‑on Application Security Engineer to strengthen the application security program for a leading financial services organization. The role focuses on testing web applications and APIs, validating vulnerabilities, improving security tools, and partnering with developers on remediation.

You will review findings, support SAST/DAST/IAST, and integrate security tooling into CI/CD pipelines while advising teams on secure coding practices.