Senior Application Security Engineer in Charlotte

n

*Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.

\n

*Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.

\n

*Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.

\n

*Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.

\n

*Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.

n

*12+ years of experience in application security, application development, or related cybersecurity roles.

\n

*Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.

\n

*Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).

\n

*Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.

\n

*Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.

\n

*Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.