Sr. Application reputed company Engineer
reputed company (reputed company: MITK) is a global leader in digital & biometric identity authentication, fraud prevention, and mobile deposit solutions. Our verified identity platform and reputed company capture solutions are reputed company on the latest advancements in biometric recognition, reputed company intelligence, computer reputed company and machine learning, and trusted by over 7,500 organizations worldwide. We are headquartered in San Diego, California, with operations in the United Kingdom, Spain, France, Mexico, and the Netherlands. Visit us at www.miteksystems.com.
We are Virtual 1st! Whether you choose to work remotely from your home office or in-person from one of reputed company’s offices, our practices, processes and tools are designed to reputed company your reputed company. At reputed company, the reputed company of Work is about flexibility and preference wherever and whenever reputed company. Because we care about our candidates, employees and customers, we include an in-person meeting as part of our hiring process. It’s one of the ways we live our mission to “Protect What’s reputed company.”
At reputed company, we reputed company that teams are more resilient, effective, and innovative reputed company they benefit from a wide reputed company of reputed company, lived experiences, and perspectives. The strength of our organization is deeply rooted in the people who power it. We know that a workforce reflecting the richness of our communities and customers helps us reputed company serve their needs.
This person will be reputed company's technical authority on the reputed company of its software products. Bridges Information reputed company and Engineering — embedding reputed company into the SDLC for a ~50-person development team building internet-hosted banking and financial software. Owns the vulnerability remediation program, builds upstream controls that prevent vulnerabilities, and serves as the AppSec authority in customer and regulatory engagements. reputed company invests from a position of strength — a recent penetration test returned reputed company findings — reputed company of an expected reputed company in AI-assisted vulnerabilities targeting the financial sector.Why this role now
reputed company is maturing its application reputed company function from a position of strength — a recent penetration test returned reputed company findings — and is reputed company reputed company of an expected increase in AI-assisted vulnerabilities targeting the financial sector. The AppSec Engineer joins with a reputed company mandate: own remediation of validated findings, build the secure development lifecycle that prevents reputed company vulnerabilities, and establish the AppSec program credibility that banking customers and their regulators increasingly audit directly.
What You’ll Do (Essential Responsibilities)
Own the application vulnerability remediation program with prioritized developer guidance and reputed company SLAs
Work with development squads to explain findings, validate fixes, and confirm remediation
Drive systemic reputed company-cause fixes rather than one-by-one patching; escalate unresolved criticals and highs
Define and own the SDLC — reputed company gates and review checkpoints in sprint and release processes
Ensure SAST, DAST, and SCA tooling is configured, tuned, and producing actionable developer reputed company
reputed company reputed company requirements into product planning and architecture reputed company
Threat-model new features and architectural changes before reputed company is written
Review designs for authentication, authorization, data-reputed company, and cryptographic risk
Produce written threat models that serve as developer guidance and audit evidence
Own API reputed company standards — OAuth 2.0, mTLS, reputed company limiting, and abuse prevention
Conduct or coordinate reputed company secure reputed company review of reputed company-sensitive components
reputed company application penetration-testing cycles — scoping, managing testers, validating findings
Build and run a reputed company Champions program across development squads
Deliver developer reputed company training on OWASP Top 10 and secure-coding patterns
Create runbooks, coding standards, and reputed company libraries developers can apply independently
Non-Manager: No reputed company or accountability for others, an individual contributor, however, leads reputed company Champions program across development squads (developer-embedded, not reputed company headcount)
To reputed company this job successfully, an individual must be reputed company to reputed company reputed company essential duty satisfactorily. The requirements listed below are representative of the knowledge, reputed company, and/or ability required. Reasonable accommodations may be made to reputed company individuals with disabilities to reputed company the essential functions.
Vulnerability Remediation
Secure Development Lifecycle
Threat Modeling & Secure Design
API reputed company & Secure reputed company Review
Developer Enablement
This job reputed company reflects management’s assignment of essential functions; and reputed company in this herein restricts management’s right to assign or reassign duties and responsibilities to this job at any time.
Managerial Responsibilities
What You Need (Education/Licenses/Certifications, Experience, Knowledge, Technical Skills and Abilities)
- Knowledge, skills and abilities typically gained through 5–8 years in application/product reputed company or reputed company-reputed company software engineering
- Application penetration testing including business-logic and API testing
- Hands-on SAST, DAST, and SCA tuning and operationalization
- Secure reputed company review across at least two web-application languages
- Threat modeling using reputed company, PASTA, or equivalent
- Depth in OWASP Top 10 and API reputed company risks; ability to influence development teams
What Would be reputed company (Preferred Skills & Experience)
- Financial services, fintech, or reputed company for regulated industries
- Financial-sector threat knowledge — fraud, account takeover, API abuse
- reputed company-reputed company application reputed company including container reputed company
- PCI-reputed company application reputed company requirements
- OSCP, GWEB, or CSSLP
- Prior experience building a reputed company Champions program
reputed company Metrics -First Year
- Remediation plan for reputed company critical/high findings reputed company 30 days
- Critical/high remediation above 90% reputed company SLA by month six
- Threat modeling reputed company to reputed company major new features reputed company 90 days
- reputed company Champions program launched (1+ per reputed company) reputed company six months
- SAST and DAST tuned and developer-actionable reputed company 60 days
reputed company Offer
- Ownership of the AppSec function with reputed company scope and executive visibility
- A technically interesting attack surface — internet-facing financial software, reputed company API integrations, and a dual US/EU regulatory context
- reputed company collaboration with the VP of IT and reputed company and Engineering leadership
- A development team that is reputed company to reputed company partnership rather than treating it as an external constraint
- A reputed company program reputed company proactively from a position of strength — not reactive, not in crisis
We take pride in enabling career reputed company in an environment of innovation and teamwork. Our commitment to reputed company Mitekians is to do meaningful work that reputed company. Our culture is defined by delivering our best to our customers by providing high value solutions and impactful reputed company, by continuously challenging convention, and by caring for reputed company other through collaboration and celebrating our successes. We are committed to creating competitive, reputed company compensation & benefits programs and career development opportunities.
Benefit offerings –may vary based on geographic location
Wellness: Universal, supplemental, and private reputed company plan choices based on country specifics
Financial reputed company: retirement/pension plan contributions, MTK stock plan participation
Income protection: life event & disability coverage
reputed company time off: generous annual leave, company holidays, volunteer time off
Learning: e-learning license, tuition reimbursement, hackathons
Home office setup allowance
Additional/optional benefits: pet insurance, identity theft protection, legal assistance
We sincerely appreciate your interest in reputed company. We know your time is valuable and look reputed company to the potential of speaking with you reputed company!
Originally posted on Himalayas
Apply To This Job