Applications Security Solutions Engineer

Application Security Engineer (Contract-to-Hire, Hybrid)

Our client, a leading financial institution, is seeking an experienced Application Security Engineer for a 6-month contract-to-hire opportunity. This role follows a hybrid schedule with four days onsite and one day remote each week. The ideal candidate will play a key role in securing internally developed, acquired, and third-party applications while partnering closely with development, DevOps, risk management, and information security teams.

Key Responsibilities

• Perform and support application security testing, including SAST, DAST, and SCA.

• Review, validate, and track remediation of identified vulnerabilities.

• Conduct and support application penetration testing, including oversight of remediation efforts and reporting of metrics.

• Coordinate internal and third-party penetration tests; review findings and contribute to remediation planning.

• Mentor development teams on secure coding practices and embed security throughout the SDLC.

• Provide threat modeling support and secure design guidance.

• Assist in securing AI-enabled applications, including evaluating data and model risks.

• Review application architectures for security vulnerabilities and compliance risks.

• Support audits and ensure adherence to regulatory requirements.

• Maintain and enhance application security standards and best practices.

Additional Responsibilities

• Ensure compliance with organizational policies, procedures, and federal/state regulations.

• Utilize Microsoft Office and relevant tools to improve workflow efficiency.

• Collaborate effectively within a team environment.

• Work with on-site systems and equipment as required.

Qualifications

• High School Diploma or equivalent required.

• 5–6 years of experience in application security.

• 5–6 years of experience within the financial services industry.

• 5–6 years of hands-on or supporting experience with penetration testing.

Certifications

• CSSLP, GWAPT, or OSCP (required upon hire).

• CompTIA Security+ or CISSP (required upon hire).

Additional Requirements

• This role is not open to C2C, third-party vendors, visa sponsorship, or student EAD candidates.