Sr. Application Security Engineer - jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Application Security Engineer based in United States.

The Sr. Application Security Engineer will serve as the technical authority responsible for embedding security throughout the software development lifecycle. This role bridges engineering and information security, helping development teams build secure, resilient, and compliant applications. You will own application security initiatives across internet-facing financial software, APIs, and cloud-based environments. The position focuses on proactive risk reduction through vulnerability management, secure design practices, threat modeling, and developer enablement. You will work closely with engineering leadership and cross-functional teams to establish scalable security practices. This is an opportunity to shape a mature security program, influence product decisions, and strengthen trust with enterprise customers and regulators.

Accountabilities:

The Sr. Application Security Engineer will own the application security strategy and collaborate closely with engineering teams to integrate security best practices into product development processes. The role requires hands-on technical expertise, strong communication skills, and the ability to drive security improvements across the organization.

• Own and manage the application vulnerability remediation program, prioritizing findings, defining remediation timelines, guiding developers, and ensuring critical issues are addressed effectively.
• Partner with engineering teams to validate fixes, identify root causes, and implement long-term security improvements rather than short-term patches.
• Define and maintain secure software development lifecycle (SDLC) processes, including security reviews, release checkpoints, and security requirements within development workflows.
• Configure, optimize, and manage security tooling such as SAST, DAST, and SCA solutions to provide actionable insights for developers.
• Conduct threat modeling for new features and architectural changes, assessing authentication, authorization, data flows, and cryptographic risks.
• Establish and maintain API security standards covering authentication, authorization, abuse prevention, and secure integration practices.
• Perform and coordinate secure code reviews, application penetration testing activities, and remediation validation.
• Build developer security enablement programs, including Security Champions initiatives, training sessions, secure coding guidelines, and reusable security resources.
• Support customer and regulatory security engagements by providing technical expertise and evidence of security practices.