Senior AppSec Engineer: Secure Web & API Apps

LPL Financial; Fort Mill (SC); On-site; USD 101,000 - 168,000; Full time

Benefits offered by this job

401K matching

Health benefits

Employee stock options

Paid time off

Volunteer time off

Job summary

LPL Financial in Fort Mill, SC is seeking a Sr. Application Security Engineer to help develop and sustain the company’s Application Security program.

You will serve as an security SME across web, mobile, APIs, databases, and containers, partnering with development teams to improve secure SDLC and CI/CD practices. Required: 5+ years in application security, hands-on testing of APIs and web apps, and experience with tools such as Burp Suite, Synopsys, Black Duck, J-Frog, and PrismaCloud.

Qualifications

• 5+ years of application security experience.
• 5+ years of experience performing manual testing of APIs and web applications to identify/validate vulnerabilities.
• 5+ years of experience developing and maintaining enterprise security libraries, components, best practices checklists.
• 5+ years of experience performing application security risk evaluation and CI/CD security posture assessment.
• 5+ years of experience creating and maintaining scan profiles for static, dynamic, IAST, and third-party libraries.

Responsibilities

• Perform as an application security SME across Web, Mobile, Databases, APIs, and Containers.
• Support and maintain application security testing platforms and integrations with automation.
• Collaborate with development teams to review false positives and mitigate vulnerabilities.
• Produce and track application security metrics and reports.
• Mentor product development and quality engineers on secure development practices.
• Monitor CVEs and industry trends for continuous improvement.

Skills

Application security

Web applications

Mobile applications

APIs

Databases

Containers

CI/CD

Education

Bachelor’s degree or equivalent in Information Security/Engineering/CS

Tools

Burp Suite

Synopsys

Black Duck

J-Frog

PrismaCloud

Postman

Job description

LPL Financial in Fort Mill, SC is seeking a Sr. Application Security Engineer to help develop and sustain the company’s Application Security program.

You will serve as an security SME across web, mobile, APIs, databases, and containers, partnering with development teams to improve secure SDLC and CI/CD practices. Required: 5+ years in application security, hands-on testing of APIs and web apps, and experience with tools such as Burp Suite, Synopsys, Black Duck, J-Frog, and PrismaCloud.