Senior Application Security Engineer

At Backbase, no two days are the same, especially for our security engineers. In the fast-evolving world of banking technology, where security threats continuously advance, staying proactive and ahead of potential risks is essential. As a Senior Application Security Engineer, you will play a critical role in guiding developer teams to deliver and deploy secure banking solutions. Your expertise will be vital in analyzing software from a security perspective, identifying vulnerabilities, and resolving security issues promptly. You will also provide workshops and guidance to developers and QA engineers on secure coding practices, security testing, and the effective use of security tools.

Key Responsibilities
- Guide and support development teams in delivering secure applications and solutions.
- Analyze software security, identify vulnerabilities, and recommend remediation strategies.
- Conduct security code reviews and suggest improvements to development teams.
- Provide training and workshops on secure coding, security testing, and security tools usage.
- Collaborate closely with customer-facing development and operations teams to ensure security standards are met.
- Mentor new team members and act as the primary security contact within your area.
- Contribute to improving security processes and tools throughout the software development lifecycle (SDLC).
- Validate that application security requirements are fulfilled before deployment.

Required Qualifications
- Strong understanding of application security principles and common vulnerabilities.
- Expertise in at least one security domain: frontend, backend, or mobile security.
- Solid knowledge of DevOps practices and cloud-native technologies.
- Proven experience identifying, triaging, and resolving application security issues.
- Background in software development with a good grasp of the SDLC.
- Professional proficiency in English, both written and spoken.

Preferred Qualifications and Growth Opportunities
While not mandatory, experience in the following areas will be highly valued and provide excellent opportunities for professional growth within the security team:
- Implementation of OWASP Application Security Verification Standard (ASVS), Mobile ASVS (M-ASVS), and Security Knowledge Framework (SKF).
- Integration of security testing tools such as Static Application Security Testing (SAST), Software Composition Analysis (SCA), Interactive Application Security Testing (IAST), and Runtime Application Self-Protection (RASP) into the SDLC.
- Facilitating threat modeling sessions with development teams to proactively identify risks.
- Conducting penetration testing on web and mobile applications.
- Training and mentoring developers on application security best practices.
- Familiarity with relevant regulatory frameworks such as GDPR and PCI-DSS.

Backbase is a place for those seeking a meaningful journey rather than just a job. We are pioneers in banking technology, constantly pushing boundaries and reinventing ourselves to deliver maximum impact. Our culture is customer-centric, collaborative, and driven by passion and fun. If you have a hacker mindset, a passion for security, and a desire to continuously expand your knowledge, you will thrive here. Join us and be part of a team that builds secure software used by millions worldwide, raising the bar every day.