Senior Application Security Engineer

Job not on LinkedIn

🔥 13 hours ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TrueML

WebsiteLinkedInAll Job Openings

51 - 200 employees

💳 Fintech

💸 Finance

👥 B2C

Fintech • Finance • B2C

TrueML is a leading company in the fintech sector, known for its innovative solutions that prioritize customer experience in the financial services industry. The company, along with its family of companies like TrueAccord, focuses on developing intelligent, digital-first communication platforms and products that revolutionize the consumer experience in financial health management. TrueML leverages the expertise of a dynamic team of data scientists, financial services experts, and customer experience specialists to create technology that addresses roadblocks to consumers' financial well-being, ensuring inclusivity and accessibility in financial systems. Founded in 2013 by Ohad Samet, TrueML continues to disrupt traditional financial services by making them more consumer-friendly and effective.

📋 Description

• Security Integration: Work with development and DevOps teams to integrate security into the software development lifecycle (SDLC). • Vulnerability Management: Identify, assess, and mitigate security vulnerabilities in applications, infrastructure, and cloud environments. • AWS Security: Implement and maintain security controls in AWS, including IAM policies, security groups, VPC configurations, and monitoring. • DevOps Security: Collaborate with DevOps teams to incorporate security best practices in CI/CD pipelines, including automated testing, secure code reviews, and infrastructure as code (IaC) security. • Threat Modeling: Conduct threat modeling and risk assessments to identify potential security threats and develop mitigation strategies. • Incident Response: Assist in developing and executing incident response plans, including identifying and responding to security incidents. • Compliance & Best Practices: Ensure that all systems and applications comply with relevant security standards, regulations, and best practices (e.g., OWASP , NIST , ISO 27001). • Security Training: Provide security training and guidance to engineering teams to promote secure coding and infrastructure management practices. • Continuous Improvement: Continuously monitor, evaluate, and improve security practices, tools, and processes.

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience. • 8+ years of experience in application security or a related role. • Strong experience with AWS security services and best practices. • Experience with DevOps tools and practices, including CI/CD pipelines, containerization, and IaC. • Proficiency in at least one programming language (e.g., Python, Go). • Strong understanding of web application security (e.g., OWASP Top Ten) and secure coding practices. • Familiarity with security tools and technologies such as SAST, DAST, SIEM, and WAFs. • Ability to work well in a team environment and collaborate effectively with engineers, developers, and other stakeholders. • AWS Certified Security – Specialty or similar certification. • Experience with container security (e.g., Docker, Kubernetes). • Familiarity with modern authentication and authorization protocols (e.g., OAuth, SAML, JWT). Knowledge of secure coding frameworks and libraries.

🏖️ Benefits

• Flexible vacation • Medical/dental/vision insurance • Traditional/Roth retirement savings options • Company-paid disability and life insurance • Flexible Spending Account & Limited FSA • Family-friendly parental leave, volunteer and voting time off • On-demand wellness platform access for you and 5 friends and family • PerkSpot discount program for 900+ merchants nationwide