Security Engineer

🚨 WE’RE HIRING: Security Engineer – Application Security 🚨
📍 Location: New York, NY (Local Candidates Only)
🏢 Work Mode: 100% Onsite – No Hybrid/Remote
💼 Employment Type: Contract-to-Hire
👥 Open Positions: 2
🇺🇸 Work Authorization: U.S. Citizens & Green Card Holders Only
We are looking for an experienced Security Engineer – Application Security with a strong background in Banking or Financial Services to join our Information Security team.
🔹 Key Responsibilities:
Application security testing for web applications, APIs, mobile applications, and databases
Manual security testing and vulnerability assessment
SAST, DAST, IAST, and third-party library scanning
Vulnerability analysis, risk assessment, and remediation tracking
Secure SDLC, DevSecOps, and CI/CD pipeline security
Hands-on experience with Burp Suite, Postman, Synopsys, Black Duck, JFrog, or Prisma Cloud
Strong understanding of OWASP Top 10 and secure coding practices
🔹 Required Qualifications:
5+ years of relevant Application Security experience
Mandatory Banking or Financial Services experience
Strong API and web application security testing expertise
Experience with application security tools and vulnerability management
Must be available to work onsite in New York, NY