Senior Application Security Specialist

Wintrust • Chicago, IL

4d

About The Position

The Senior Application Security Specialist leads the design, implementation, and continuous improvement of security across enterprise applications, APIs, and SaaS platforms. This role partners with development teams to embed security throughout the software development life cycle (SDLC), reduce application risk, and implement AI-assisted engineering workflows aligned with enterprise security and regulatory requirements.

Requirements

• 5-7 years of relevant experience
• Bachelor’s degree or equivalent; Computer Science or Cybersecurity preferred
• Application security, cybersecurity, and/or Artificial Intelligence certifications preferred
• Experience in application security, secure development, or DevSecOps, including threat modeling, manual code review, API testing, vulnerability remediation, and Git-based CI/CD integration.
• Ability to review Java, Apex and/or Python code and build automation.
• Knowledge of OWASP Top 10, API Security Top 10, ASVS, authentication, authorization, OAuth/OIDC, and secrets management.

Nice To Haves

• Experience implementing AI-assisted SDLC workflows for code review, test generation, security testing, and remediation, with measurable results.
• Ability to apply human review, validate AI-generated code and tests, and protect sensitive data.
• Experience with Checkmarx, Akamai API Security, or comparable tools.

Responsibilities

• Lead application threat modeling, security architecture reviews, and manual code reviews.
• Define requirements for authentication, authorization, data protection, and secure design across web applications, APIs, and cloud-hosted services.
• Implement and tune static application security testing (SAST) and software composition analysis (SCA) with Checkmarx.
• Integrate dynamic testing (DAST), secrets scanning, and risk-based security gates into continuous integration and delivery (CI/CD) pipelines.
• Support API discovery, posture assessment, security testing, and runtime monitoring with enterprise API security toolset.
• Investigate sensitive data exposure, broken authorization, and API abuse with application owners and security operations.
• Design and implement AI-assisted SDLC workflows for code review, unit and integration test generation, security testing, vulnerability triage, and remediation.
• Establish human review, source-code and data protection, and validation of AI-generated code and tests.
• Drive application vulnerability remediation based on exploitability, exposure, and business impact.
• Validate fixes, support incident response, and track testing coverage, remediation times, and recurring defects to support risk and compliance reporting.
• Coach developers on secure coding and maintain reusable security patterns and guidance.
• Evaluate AI workflow adoption, finding quality, test coverage, and time savings to improve security and developer productivity.

Benefits

• Medical Insurance
• Dental
• Vision
• Life insurance
• Accidental death and dismemberment
• Short-term and long term Disability Insurance
• Parental Leave
• Employee Assistance Program (EAP)
• Traditional and Roth 401(k) with company match
• Flexible Spending Account (FSA)
• Employee Stock Purchase Plan at 5% discount
• Critical Illness Insurance
• Accident Insurance
• Transportation and Commuting Benefits
• Banking Benefits
• Pet Insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree