Senior Application Security Engineer - Remote

Overview

The Senior Application Security Engineer will oversee the application security initiatives across Emburse products, working closely with the engineering and DevOps teams to integrate security best practices throughout the software development lifecycle.

In Short

• Lead “shift left” security efforts to build security into the software development lifecycle.
• Build relationships with engineering teams on security best practices.
• Ensure vulnerabilities are remediated within procedural timeframes.
• Establish a technical roadmap for 3rd party and open source frameworks.
• Triage and prioritize bug bounty submissions and vulnerability findings.
• Assist with internal and external vulnerability scanning and penetration testing.
• Conduct secure design reviews and threat modeling.
• Create metrics and reporting of the application security program.

Requirements

• 7+ years of industry experience in application security.
• Expertise in application security implementations and methodologies.
• Knowledge of OWASP Top 10 and web application exploitation techniques.
• Experience with DevSecOps and secure code development.
• Use of security tools (ex: SAST, IAST, CSPM, SIEM).
• SaaS experience with web and mobile solutions.
• Experience with compliance frameworks (i.e. PCI, SOC 2, ISO 27001).
• Relevant certifications such as CISSP, CCSP, etc.
• Strong communication skills to solve complex issues.
• Bachelor’s degree in Computer Science or equivalent experience.

Benefits

• Opportunity to work in a leading company in travel and expense solutions.
• Collaborative environment with cross-functional teams.
• Involvement in innovative security practices.