Application Security Engineer

Aquent, a leading talent solutions partner, is collaborating with a prominent financial services firm dedicated to protecting its vast information assets and fostering a secure digital environment. This firm is at the forefront of financial innovation, serving a broad customer base and upholding the highest standards of trust and security.

Are you ready to make a significant impact on the security posture of a leading financial institution? We are seeking a highly skilled and passionate individual to join a dynamic team at the forefront of application security. In this pivotal role, you will be instrumental in safeguarding critical software assets, strengthening the development process, and drastically reducing defects and vulnerabilities across production environments. Your expertise will directly contribute to building trust and ensuring the resilience of our client's digital platforms, empowering them to innovate securely and confidently.

**What You'll Do:**

* Lead the establishment and ongoing evolution of the Secure Software Development Program.

* Create and implement software security policies and best practices.

* Provide essential security architecture guidance to development teams.

* Conduct thorough software security scanning and penetration testing.

* Educate and mentor developers and testers on secure coding practices.

* Strengthen the development process by integrating robust security controls.

* Reduce defects and vulnerabilities in production environments.

* Partner effectively with development teams to balance security requirements with innovation.

**Must-Have Qualifications:**

* Prior engineering experience within a Software Security Assurance or Application Security team.

* Proven ability to partner effectively with development teams to balance security requirements with innovation.

* Strong analytical skills, including the ability to interpret large volumes of distributed data and translate it into clear, actionable insights.

* Experience working with a range of application security tools, including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and secrets management solutions.

* Solid application engineering experience and a strong understanding of common application vulnerabilities, attack vectors, and remediation strategies.

* Familiarity with secure software design principles and industry best practices for integrating security into the software development lifecycle.

* Experience with application security testing tools and their integration into agile development environments.

* Familiarity with recognized industry frameworks and standards such as OWASP, CIS, and NIST.

* A minimum of two years of experience working with static analysis or threat modeling tools.

* Experience implementing and scaling enterprise application security tools, services, and controls.

* Strong understanding of secure coding practices, code review processes, threat modeling, security requirements analysis, and architectural risk assessment.

The Schwab Application Security team, operating under the leadership of the Chief Information Security Officer (CISO), is responsible for protecting Schwab's information assets in support of business objectives and in alignment with corporate policies. As a core function within Cybersecurity Services, the Application Security team leads the establishment and ongoing evolution of Schwab's Secure Software Development Program. This includes the creation and implementation of software security policies and best practices, providing security architecture guidance, conducting software security scanning and penetration testing, and educating developers and testers on secure coding practices.

The Software Security Engineer plays a key role in safeguarding software assets by strengthening the development process, enhancing security controls, and reducing defects and vulnerabilities in production environments.

Well qualified candidates for this position will demonstrate the following key traits:

Successful candidates will have prior engineering experience within a Software Security Assurance or Application Security team and a proven ability to partner effectively with development teams to balance security requirements with innovation. They will demonstrate strong analytical skills, including the ability to interpret large volumes of distributed data and translate it into clear, actionable insights. Candidates should also have experience working with a range of application security tools, including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and secrets management solutions.

In addition, candidates will bring solid application engineering experience and a strong understanding of common application vulnerabilities, attack vectors, and remediation strategies. They should be familiar with secure software design principles and industry best practices for integrating security into the software development lifecycle. Experience with application security testing tools, and their integration into agile development environments is expected.

Candidates should have familiarity with recognized industry frameworks and standards such as OWASP, CIS, and NIST. A minimum of two years of experience working with static analysis or threat modeling tools is expected, along with experience implementing and scaling enterprise application security tools, services, and controls. Finally, candidates must demonstrate a strong understanding of secure coding practices, code review processes, threat modeling, security requirements analysis, and architectural risk assessment.

Please note: This position is available on a W-2 employment basis only and is not open to Corp-to-Corp (C2C) arrangements. The client is also unable to provide employment-based visa sponsorship or transfers for this role.

#LI-LP1

**About Aquent Talent:**

Aquent Talent connects the best talent in marketing, creative, and design with the world's biggest brands.

Our eligible talent get access to amazing benefits like subsidized health, vision, and dental plans, paid sick leave, and retirement plans with a match.

Aquent is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. We're about creating an inclusive environment-one where different backgrounds, experiences, and perspectives are valued, and everyone can contribute, grow their careers, and thrive.