Application Security Engineer

The Intersect Group is seeking an experienced Application Security Engineer to lead vulnerability remediation and application security initiatives across a large scale web platform environment. This role will focus on identifying, prioritizing, and resolving application security risks while partnering with development and infrastructure teams to strengthen the overall security posture of critical customer facing applications., * Assess, prioritize, and remediate application security vulnerabilities across web applications and supporting platforms

• Review and secure custom code, third party packages, plugins, themes, and application integrations

• Partner with software engineers to implement secure coding practices and resolve identified security findings

• Analyze results from vulnerability scans, penetration tests, and code reviews and drive remediation activities

• Maintain security and compliance controls for customer facing payment applications and services

• Support application security initiatives across cloud environments, CI/CD pipelines, infrastructure as code, and containerized platforms

• Evaluate vulnerable software components and recommend mitigation strategies, patches, or secure alternatives

• Monitor application security metrics and contribute to continuous improvement of security processes and standards, * Work on highly visible initiatives that directly support customer trust, compliance, and business continuity

• Collaborate with development, product, and infrastructure teams to improve enterprise security practices

• Gain exposure to modern cloud technologies, application security tooling, and large scale web environments

• 5+ years of experience in Application Security, Secure Software Development, or Software Engineering roles

• Strong hands on experience securing and maintaining WordPress environments including core components, custom themes, and third party plugins

• Experience developing or supporting web applications using PHP, JavaScript, and TypeScript

• Proven track record remediating vulnerabilities identified through penetration testing, vulnerability scanning, and code reviews

• Experience performing secure code reviews and identifying security weaknesses across web applications and API integrations

• Familiarity with cloud platforms such as Google Cloud Platform and Amazon Web Services

• Experience supporting CI/CD pipelines, containerized environments, and Kubernetes based deployments

• Knowledge of application security best practices, vulnerability management processes, and compliance requirements for payment processing systems

• Experience with security scanning and vulnerability management tools such as Wiz or similar platforms

• Strong communication, collaboration, and problem solving skills with the ability to influence secure development practices across teams

PREFERRED QUALIFICATIONS

• Experience supporting Ruby based APIs or comparable experience supporting Python driven APIs and services

• Experience working with modern front end frameworks such as React or Angular

• Knowledge of infrastructure as code security and cloud security best practices

• Experience supporting PCI DSS compliance initiatives and security remediation efforts