Senior AppSec Engineer - Lead Security Testing & DevSecOps

Quantum Technologies. LLC; New York (NY); On-site; USD 170,000 - 210,000; Full time

Job summary

LPL Financial in New York seeks a Senior Security Engineer to advance and sustain the Application Security program. You will serve as an SME across web/mobile apps, APIs, databases, and containers, driving secure development and testing practices.

You will mentor engineers, review vulnerabilities, and coordinate with audits and compliance to enhance the CI/CD security posture. Strong leadership and communication are essential.

Qualifications

• 10+ years of application security experience.
• 10+ years of experience performing manual testing of APIs and web applications to identify vulnerabilities.
• 10+ years of experience developing and maintaining enterprise security libraries, components, best practices checklists.
• 5+ years of experience performing application security risk evaluation and CI/CD security improvements.
• 5+ years of experience creating and maintaining scan profiles for static, authenticated dynamic, IAST, and 3rd party libraries analysis.

Responsibilities

• Perform as an application security SME in Web, Mobile, Databases, APIs, Containers, and other domains.
• Support and maintain application security testing platforms and develop integrations with automation platforms.
• Review potential false-positives with development teams and propose mitigating factors.
• Produce and track application security metrics.
• Support secure development and testing of critical Advisor and Investor LPL applications.
• Mentor product development and quality engineers on secure development practices.
• Monitor CVEs and industry developments for continuous improvement.
• Collaborate with Internal Audit, IT Governance, IT Compliance on projects.

Skills

Application security

API testing

Web security

CI/CD pipelines

Vulnerability management

Static analysis

Dynamic analysis

IAST

Third-party libraries

Education

Bachelor's Degree in Information Security

Tools

Burp Suite

Postman

Synopsys

BlackDuck

J-Frog

PrismaCloud

Job description

LPL Financial in New York seeks a Senior Security Engineer to advance and sustain the Application Security program. You will serve as an SME across web/mobile apps, APIs, databases, and containers, driving secure development and testing practices.

You will mentor engineers, review vulnerabilities, and coordinate with audits and compliance to enhance the CI/CD security posture. Strong leadership and communication are essential.