Senior AppSec Engineer — Secure DevOps & Innovation

LPL Financial; New York (NY); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial is seeking a Sr Application Security Engineer to help develop and sustain the Application Security program across the company. You will partner with Development teams to secure web, mobile, API, and data services, leveraging best practices in secure SDLC, CI/CD, and threat modeling.

This role emphasizes mentorship, collaboration, and staying current with CVE trends and industry developments while aligning with Internal Audit and IT Compliance.

Qualifications

• 5+ years in application security with hands-on testing of APIs and web apps.
• Experience building and maintaining security libraries, checklists and best practices.
• Ability to evaluate risk and drive secure CI/CD improvements.

Responsibilities

• Serve as an application security SME for Web, Mobile, APIs and databases.
• Support security testing platforms and automate integrations with tooling.
• Review false-positives with development teams and track mitigations.
• Produce and monitor application security metrics and deliver improvements.

Skills

OWASP Top 10

DevSecOps

Secure SDLC

Security metrics

Threat modeling

Collaboration

Education

Bachelor's degree in Information Security, Engineering or Computer Science

Tools

Burp Suite

Postman

Synopsys

BlackDuck

JFrog

PrismaCloud

API scanners

Job description

LPL Financial is seeking a Sr Application Security Engineer to help develop and sustain the Application Security program across the company. You will partner with Development teams to secure web, mobile, API, and data services, leveraging best practices in secure SDLC, CI/CD, and threat modeling.

This role emphasizes mentorship, collaboration, and staying current with CVE trends and industry developments while aligning with Internal Audit and IT Compliance.