Application Security Engineer

Webster Bank • Southington, CT

264d • $115,000 - $130,000

About The Position

If you're looking for a meaningful career, you'll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster's values, these set us apart as a bank and as an employer. Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work! As an Application Security Engineer, you will play a vital role in safeguarding our organization's applications and data. Your expertise will help us maintain a robust security posture and ensure the trust of our users and stakeholders. The primary function for this position is to ensure that applications and services are secured and implemented with best security practices.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• 5+ years of experience in cybersecurity, application security, or a similar IT role
• Strong understanding in security engineering, system and network security, authentication and security protocols, cryptography, and application security
• Strong understanding of web application security, including OWASP Top 10 vulnerabilities
• Proficiency in secure coding practices and common programming languages (e.g., .NET, Java, Python)
• Experience with security testing tools and methodologies (e.g., SAST, SCA, DAST, penetration testing)
• Familiarity with compliance regulations and industry security standards
• Excellent problem-solving and analytical skills
• Strong communication skills and ability to work effectively in cross-functional teams

Nice To Haves

• Relevant security certifications (e.g., CISSP, GIAC, CCNA)
• Experience with cloud security and containerization technologies
• Knowledge of DevSecOps practices and CI/CD pipelines
• Familiarity with threat modeling methodologies and risk assessment frameworks
• Experience with advanced persistent threats, phishing and social engineering, network access controllers (NAC), gateway anti-malware and enhanced authentication

Responsibilities

• Conduct security-focused code reviews and application security assessments
• Perform threat modeling and risk assessments for new and existing applications
• Implement and maintain security controls, including authentication, authorization, and encryption mechanisms
• Develop and oversee secure code analysis programs in conjunction with development teams
• Identify and assess security vulnerabilities in applications and systems
• Lead the remediation of application vulnerabilities discovered through scanning and security testing
• Help manage the organization's vulnerability intake and remediation process
• Work closely with development teams to integrate security best practices into the SDLC
• Provide guidance and training on secure coding practices and application security
• Collaborate with IT professionals to harden systems and applications
• Assist in designing secure application architectures and infrastructure
• Evaluate and provide recommendations on third-party applications and services
• Contribute to the development of security policies, standards, processes, and procedures
• Stay up-to-date with the latest security threats, trends, and countermeasures
• Research and analyze application behaviors to improve security and stability
• Contribute to the evolution of the organization's application security functions and services

Benefits

• Incentive compensation

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree