Senior Application Security Engineer

🕒 June 9

🏈 Alabama – Remote

🏈 Alabama – Remote

💵 $97.1k - $161.8k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

M&T Bank

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1856

🛡️ Insurance

💼 Consulting

🏦 Banking

Insurance • Consulting • Banking

M&T Bank is a leading regional financial institution that provides a wide range of banking services to personal, business, and commercial clients. Known for its customer satisfaction in mobile banking, M&T Bank offers products and services such as checking accounts, credit cards, mortgages, personal loans, and insurance. Additionally, it provides financial planning through Wilmington Advisors @ M&T. The bank is committed to community engagement, supporting local businesses, multicultural banking, and volunteerism. With a focus on cybersecurity and digital banking solutions, M&T Bank serves its clientele through comprehensive online and mobile services.

📋 Description

• Develop and implement engineering’s technical security policies and procedures, and performance of security measures • Scan and test applications for potential vulnerabilities and non-compliance with security standards • Partner with engineering teams during code reviews to identify potential security vulnerabilities and advise strategies to develop more secure code • Integrate security tools and processes into the software development and operations pipeline, including automation of security checks and scans to identify and fix vulnerabilities early in the development process • Lead training sessions for technology teams in one-on-one coaching and large team training sessions on secure coding practices and information system security best practices • Configure and manage automated tools and solutions to address security weaknesses in applications, systems, and infrastructure • Partner closely with incident response teams to mitigate the impact of incidents from application security vulnerabilities and identify necessary steps to remediate findings • Proactively recommend process enhancements and implement prioritized improvements within Cybersecurity team to enhance application security capabilities • Track current events, technological advancements, and changes in the secure application development landscape to anticipate how attackers may change their tactics, and implement adjustments to internal technologies, policies, and procedures • Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis • Identify risk-related issues needing escalation to management

🎯 Requirements

• Bachelor's degree and a minimum of 3 years’ relevant work experience, or a combined minimum of 7 years’ higher education and/or work experience, including a minimum of 5 years software development or application security • Prior experience reviewing or fixing vulnerabilities identified using application security tools such as SAST, SCA, IAST, DAST, or ASPM • Intermediate understanding of the Software Development Life Cycle (SDLC) • Ability to train technologist and people leaders at various levels on secure application development, both in person and virtually • Excellent communication and interpersonal skills

🏖️ Benefits

• Health insurance • 401(k) • Paid time off • Flexible working arrangements • Professional development opportunities