Sr Security Software Development Engineer

Sr Security Software Development Engineer leads the development strategy of the shared security services engineering team which is responsible for building horizontal enterprise level security solutions.

You will be responsible for defining what a well-architected enterprise solution looks like and for leading a team of engineers to build the solution. You will create workstreams and work closely with other senior engineers to deliver critical initiatives. You will identify opportunities to solve security problems in creative ways by leveraging your expertise in software development, application of AI solutions and scalable architecture.

Key Responsibilities and Duties

• Design and implement secure architectures for applications, APIs and cloud platforms including authentication mechanisms, encryption protocols, and security monitoring frameworks

• Conduct comprehensive security assessments through code reviews, threat modeling, and automated testing integration within CI/CD pipelines

• Establish and maintain security standards, best practices, and guidelines while educating development teams on secure coding practices

• Collaborate with cross-functional teams to integrate security throughout the software development lifecycle and ensure compliance with relevant regulations

• Identify opportunities and implement solutions to automate & enhance cyber security practices using Generative AI or Traditional AI mechanisms Improve operational efficiency of processes or software systems through automation

• Provide technical leadership & mentorship to junior engineers both within and outside the team

Educational Requirements

• Bachelor's Degree or Equivalent Experience Required

Work Experience

• 5+ Years Required; 7+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
9IC

Required Skills: 

• 5+ years of experience in software engineering or application security roles 

• 5+ years of proficiency in at least one major programming language (Java, Python, C#, Go) with demonstrated secure coding practices 

• 3+ years of hands-on experience with web application and API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management 

• 2+ years of experience working with Agile software development practices 

• 2+ years of experience working on one or more cloud platforms such as AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform 

 

Preferred Skills: 

• 3+ years of full stack development experience using UI frameworks such as React JS, Next JS, Auth JS 

• Hands-on experience with web application and API security testing, vulnerability assessment, and remediation 

• Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks (NY-DFS) 

• Ability to conduct effective threat modeling and security architecture reviews for complex software systems 

• Experience using open source Generative or traditional AI software solutions to improve operational efficiency 

Related Skills

Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively

Anticipated Posting End Date:

2025-04-25

Base Pay Range: $152,200/yr. - $253,600/yr.

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.  In addition to base salary, the competitive compensation package may include, dep