Application Security Engineer - Hybrid

SWIFT • Manassas, VA

3d • Hybrid

About The Position

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy. We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions. What Will Make You Successful We are seeking professionals with: A Bachelor’s degree or equivalent practical experience. 18-24 months of hands-on experience in application security, software development, or a related IT security role. Experience with Java, JavaScript, and Python, with a focus on secure coding practices and vulnerability management. Familiarity with security testing tools such as SAST, SCA, DAST, API Security, and experience with tools like Synk,, BURP, OWASP Dependency-Check or Nexus Lifecycle, and understanding how these tools integrate into CI/CD pipelines. A solid understanding of application security, including how to integrate security early into the development process to ensure secure code. Strong collaboration skills with the ability to work closely with developers to guide them in adopting security best practices without disrupting their workflow. Strong communication skills, with the ability to clearly explain complex security concepts to both technical and non-technical teams. A problem-solving mindset, enabling you to quickly identify security risks, adapt to new technologies, and deliver practical solutions. Drive to thrive in a fast-paced environment, with the ability to take ownership of security tasks and initiatives. Mentorship ability, comfortable guiding less experienced developers on security best practices. Preferred Qualifications Security certifications such as GWEB, OSCP, or similar are a plus. Experience with DevSecOps principles or secure software development practices. Familiarity with cloud security concepts, securing containerized applications using platforms like Docker and Kubernetes. A passion for security and continuous learning, with an emphasis on staying updated on trends in application security, especially as they apply to financial services and regulated industries. What We Value A proactive mindset, with the ability to prevent security issues early by embedding security into the development lifecycle. A team player mentality, able to collaborate effectively with developers and teams to influence and drive security practices. Adaptability, able to adjust strategies and approaches quickly to address evolving security threats and meet business-critical needs. . Swift is unable to sponsor an employment authorization for this position now or in the future. The estimated salary range for a new hire in this position in Virginia is $82,361.00 USD Annual MINIMUM to $117,658.00 USD Annual MAXIMUM. Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. Our compensation packages include a competitive base salary and bonus opportunity for all employee’s contingent on personal and company performance. Our generous benefits program includes medical, dental, vision and life insurance with no premium costs for our employees and their families, and retirement plan plus matching 401k. What we offer We put you in control of career We give you a competitive package We help you perform at your best We help you make a difference We give you the freedom to be yourself We give you the freedom to be yourself. We are creating an environment of unique individuals – like you – with different perspectives on the financial industry and the world. A diverse and inclusive environment in which everyone’s voice counts and where you can reach your full potential. If you believe you require a reasonable accommodation to participate in the job application or interview process, please contact us to request accommodation. Don’t meet every single requirement? At Swift, we are dedicated to building a workplace where people can bring their full selves and ideas to the team, so if you are excited about this role, we encourage you to apply even if you do not meet every single qualification.

Requirements

• A Bachelor’s degree or equivalent practical experience.
• 18-24 months of hands-on experience in application security, software development, or a related IT security role.
• Experience with Java, JavaScript, and Python, with a focus on secure coding practices and vulnerability management.
• Familiarity with security testing tools such as SAST, SCA, DAST, API Security, and experience with tools like Synk,, BURP, OWASP Dependency-Check or Nexus Lifecycle, and understanding how these tools integrate into CI/CD pipelines.
• A solid understanding of application security, including how to integrate security early into the development process to ensure secure code.
• Strong collaboration skills with the ability to work closely with developers to guide them in adopting security best practices without disrupting their workflow.
• Strong communication skills, with the ability to clearly explain complex security concepts to both technical and non-technical teams.
• A problem-solving mindset, enabling you to quickly identify security risks, adapt to new technologies, and deliver practical solutions.
• Drive to thrive in a fast-paced environment, with the ability to take ownership of security tasks and initiatives.
• Mentorship ability, comfortable guiding less experienced developers on security best practices.

Nice To Haves

• Security certifications such as GWEB, OSCP, or similar are a plus.
• Experience with DevSecOps principles or secure software development practices.
• Familiarity with cloud security concepts, securing containerized applications using platforms like Docker and Kubernetes.
• A passion for security and continuous learning, with an emphasis on staying updated on trends in application security, especially as they apply to financial services and regulated industries.

Benefits

• medical, dental, vision and life insurance with no premium costs for our employees and their families, and retirement plan plus matching 401k
• competitive base salary and bonus opportunity for all employee’s contingent on personal and company performance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees