Sr. Information Security Engineer - AppSec

• →Executes vulnerability analysis and exploitation of applications, operating systems and networks.
• →Identifies intrusion or incident path or method through testing and evaluation procedures.
• →Contributes to the design, development and implementation of countermeasures, systems integration and tools specific to cyber and information operations.
• →Resolves complex malware and intrusion issues within the system as they occur.
• →Monitors industry security updates, technologies and practices on a continual basis to improve overall security management.
• →Serves as an internal information security consultant on the standards, complex issues and best practices for the organization.
• →Performs testing and analysis of complex software systems to determine both the functionality and intent of the systems.
• →Builds and maintains operational and configuration documentation and creates and maintains diagrams.
• →Works with Cybersecurity Risk and Security Operation teams to enhance the overall security posture of the enterprise.

• 3 years of experience in cybersecurity for a mid-large sized organization
• Direct experience with vulnerability scanning tools, including:
  • Baseline scan design and troubleshooting
  • Database scanning (Postgres, Oracle, or similar)

• 5+ years of experience providing cybersecurity solutions in an enterprise environment
• Previous experience owning or administering tools for SAST, DAST and Attack Surface Management
• Experience designing or operating CVSS-agnostic or augmented risk scoring models
• Ability to translate vulnerability data into executive-level metrics and KRIs
• Experience owning and maintaining procedure documentation, runbooks, and operational standards
• Comfort operating in regulated environments
• Experience supporting audits, exams, or regulatory reviews (FFIEC, OCC, SOX, or similar)
• Experience automating vulnerability workflows and reporting (PowerShell, Python, APIs, or vendor scripting)

• University (Degree) Preferred

• Physical Requirements: Sedentary Work

Career Level
7IC

Posting end date - 9/30/26