Application Security Engineer

If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer.  

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

As an Application Security Engineer, you will play a vital role in safeguarding our organization's applications and data. Your expertise will help us maintain a robust security posture and ensure the trust of our users and stakeholders.

The primary function for this position is to ensure that applications and services are secured and implemented with best security practices.  As an Application Security Engineer, you will be responsible for designing, implementing, and maintaining security measures for our organization's applications and software systems. You will work closely with development teams to integrate security practices throughout the software development lifecycle (SDLC) and ensure that our applications are protected against potential threats and vulnerabilities.  You will help manage the application security program, define standards, policies, and procedures, and coordinate with engineering teams to implement and maintain security platforms.

Key Responsibilities

Security Assessment and Implementation

• Conduct security-focused code reviews and application security assessments

• Perform threat modeling and risk assessments for new and existing applications

• Implement and maintain security controls, including authentication, authorization, and encryption mechanisms

• Develop and oversee secure code analysis programs in conjunction with development teams

Vulnerability Management

• Identify and assess security vulnerabilities in applications and systems

• Lead the remediation of application vulnerabilities discovered through scanning and security testing

• Help manage the organization's vulnerability intake and remediation process

Collaboration and Guidance

• Work closely with development teams to integrate security best practices into the SDLC

• Provide guidance and training on secure coding practices and application security

• Collaborate with IT professionals to harden systems and applications

Security Architecture and Design

• Assist in designing secure application architectures and infrastructure[

• Evaluate and provide recommendations on third-party applications and services

• Contribute to the development of security policies, standards, processes, and procedures

Continuous Improvement and Research

• Stay up-to-date with the latest security threats, trends, and countermeasures

• Research and analyze application behaviors to improve security and stability

• Contribute to the evolution of the organization's application security functions and services

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field

• 5+ years of experience in cybersecurity, application security, or a similar IT role

• Strong understanding in security engineering, system and network security, authentication and security protocols, cryptography, and application security

• Strong understanding of web application security, including OWASP Top 10 vulnerabilities

• Proficiency in secure coding practices and common programming languages (e.g., .NET, Java, Python)

• Experience with security testing tools and methodologies (e.g., SAST, SCA, DAST, penetration testing)

• Familiarity with compliance regulations and industry security standards

• Excellent problem-solving and analytical skills

• Strong communication skills and ability to work effectively in cross-functional teams

Preferred Qualifications

• Relevant security certifications (e.g., CISSP, GIAC, CCNA)

• Experience with cloud security and containerization technologies

• Knowledge of DevSecOps practices and CI/CD pipelines

• Familiarity with threat modeling methodologies and risk assessment frameworks

• Experience with advanced persistent threats, phishing and social engineering, network access controllers (NAC), gateway anti-malware and enhanced authentication

Key Competencies

• Attention to detail and strong analytical thinking

• Ability to work in a fast-paced, dynamic environment

• Excellent written and verbal communication skills

• Proactive approach to identifying and addressing security issues

• Continuous learning mindset to stay updated on emerging security threats and technologies

The estimated salary range for this position is $115,000USD to $130,000USD. Actual salary may vary up or down depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position is eligible for incentive compensation.

#LI-EF1

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.