What are the responsibilities and job description for the Application Security Engineer position at BridgeView?
We are seeking a hands-on Application Security Engineer to strengthen the application security program for a leading financial services organization. This role focuses on testing web applications and APIs, validating vulnerabilities, improving security tools, and partnering with developers on remediation.
Responsibilities
- Manually test web applications and APIs for security vulnerabilities
- Review scan results, validate findings and false positives, and track remediation
- Support SAST, DAST, IAST, and third-party library scanning
- Integrate application security tools into CI/CD pipelines
- Advise development teams on secure coding and application security best practices
- Monitor CVEs and produce application security metrics
Requirements
- 5 years of application security experience
- 5 years of manual web application and API security testing
- Strong knowledge of OWASP Top 10, secure SDLC, and DevSecOps
- Experience with vulnerability assessment and remediation
- Experience configuring application security scanning tools and integrating them with CI/CD pipelines
- Strong communication skills and the ability to partner with developers
Preferred
- Experience with Burp Suite, Postman, Synopsys, Black Duck, JFrog, Prisma Cloud, or similar tools
- Familiarity with applications built using Java, C#, JavaScript, React, Angular, and REST APIs
- Bachelor’s degree in Information Security, Engineering, Computer Science, or a related field
Salary : $60 - $70