If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer.

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

As an Application Security Engineer, you will play a vital role in safeguarding our organization's applications and data. Your expertise will help us maintain a robust security posture and ensure the trust of our users and stakeholders.

The primary function for this position is to ensure that applications and services are secured and implemented with best security practices. As an Application Security Engineer, you will be responsible for designing, implementing, and maintaining security measures for our organization's applications and software systems. You will work closely with development teams to integrate security practices throughout the software development lifecycle (SDLC) and ensure that our applications are protected against potential threats and vulnerabilities. You will help manage the application security program, define standards, policies, and procedures, and coordinate with engineering teams to implement and maintain security platforms.

Key Responsibilities
Security Assessment and Implementation

Conduct security-focused code reviews and application security assessments

Perform threat modeling and risk assessments for new and existing applications

Implement and maintain security controls, including authentication, authorization, and encryption mechanisms

Develop and oversee secure code analysis programs in conjunction with development teams

Vulnerability Management

Identify and assess security vulnerabilities in applications and systems

Lead the remediation of application vulnerabilities discovered through scanning and security testing

Help manage the organization's vulnerability intake and remediation process

Collaboration and Guidance

Work closely with development teams to integrate security best practices into the SDLC

Provide guidance and training on secure coding practices and application security

Collaborate with IT professionals to harden systems and applications

Security Architecture and Design

Assist in designing secure application architectures and infrastructure[

Evaluate and provide recommendations on third-party applications and services

Contribute to the development of security policies, standards, processes, and procedures

Continuous Improvement and Research

Stay up-to-date with the latest security threats, trends, and countermeasures

Research and analyze application behaviors to improve security and stability

Contribute to the evolution of the organization's application security functions and services

Required Qualifications

Bachelor's degree in Computer Science, Information Security, or a related field

5+ years of experience in cybersecurity, application security, or a similar IT role

Strong understanding in security engineering, system and network security, authentication and security protocols, cryptography, and application security

Strong understanding of web application security, including OWASP Top 10 vulnerabilities

Proficiency in secure coding practices and common programming languages (e.g., .NET, Java, Python)

Experience with security testing tools and methodologies (e.g., SAST, SCA, DAST, penetration testing)

Familiarity with compliance regulations and industry security standards

Excellent problem-solving and analytical skills

Strong communication skills and ability to work effectively in cross-functional teams

Preferred Qualifications

Relevant security certifications (e.g., CISSP, GIAC, CCNA)

Experience with cloud security and containerization technologies

Knowledge of DevSecOps practices and CI/CD pipelines

Familiarity with threat modeling methodologies and risk assessment frameworks

Experience with advanced persistent threats, phishing and social engineering, network access controllers (NAC), gateway anti-malware and enhanced authentication

Key Competencies

Attention to detail and strong analytical thinking

Ability to work in a fast-paced, dynamic environment

Excellent written and verbal communication skills

Proactive approach to identifying and addressing security issues

Continuous learning mindset to stay updated on emerging security threats and technologies

The estimated salary range for this position is $ 115,000USD to $ 130,000USD . Actual salary may vary up or down depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position is eligible for incentive compensation.

#LI-EF1

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Webster Bank

New Jobs

Application Security Engineer