application security engineer

Barracuda Networks

<div><div>Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.</div><div>
</div><div>
We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.</div><div></div><div><br>
</div><div><b>
Envision yourself at Barracuda</b></div><div>
</div><div>
As a Senior Application Security Engineer, you&rsquo;ll help shape the future of our AppSec program. You&rsquo;ll work effectively and efficiently in a small, high-impact team, bringing a sense of ownership and community. You&rsquo;ll have the opportunity to learn quickly, provide feedback on long-term improvements, and drive strategic security initiatives across our product portfolio.</div><div>
</div><div><b>
Tech Stack:</b></div><ul><li><div>
TypeScript/JavaScript, Python, Ruby, Java, Go</div></li><li><div>
CI/CD automation tools (SAST, SCA, Secrets Scanning, etc.)</div></li><li><div>
AI security controls and LLM risk management</div></li></ul><div><b>
What you&rsquo;ll be working on</b></div><ul><li><div>
Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs</div></li><li><div>
Facilitate lightweight, feature-level threat models and drive risk-based discussions</div></li><li><div>
Perform hands-on application penetration tests and security-focused source code reviews</div></li><li><div>
Drive risk rating and vulnerability management processes</div></li><li><div>
Partner with product, platform, and engineering leads to drive security initiatives</div></li><li><div>
Lead outcome-focused design review discussions and security trainings</div></li><li><div>
Provide framework-specific remediation guidance to developers</div></li></ul><div><b>
What you bring to the role</b></div><ul><li><div>
5 - 8+ years in product-focused AppSec, with a track record of embedding security and reducing late-stage findings via automation and developer enablement</div></li><li><div>
Deep practical knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls)</div></li><li><div>
Proficient in at least two programming languages (TypeScript/JavaScript, Python, Ruby, Java, Go, etc.)</div></li><li><div>
Hands-on experience with application penetration testing and code reviews</div></li><li><div>
Proficient in threat modeling and risk-based analysis</div></li><li><div>
Strong organizational, time-management, communication, and presentation skills</div></li></ul><div>
</div><div><b>
What you&rsquo;ll get from us</b></div><div>
A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility &ndash; there are opportunities for cross training and the ability to attain your next career step within Barracuda.
</div><div>
</div><ul><li><div>Equity, in the form of non-qualifying options</div></li><li><div>
High-quality health benefits</div></li><li><div>
Retirement Plan with employer match</div></li><li><div>
Career-growth opportunities</div></li><li><div>
Flexible Time Off and Paid Time Off benefits</div></li><li><div>
Volunteer opportunities</div></li></ul><div>
</div><div>
#LI-remote</div><div>
</div><div>
Job ID: 27-0245</div></div>

Senior Application Security Engineer

ServiceTitan

<div><p><b>Ready to be a Titan?</b></p><p>
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for an exceptional Staff Application Security Engineer to help us build a &quot;Secure Paved Road&quot;&mdash;an automated, self-service ecosystem that enables our 80+ R&amp;D squads to build securely by default.</p><p></p><p>
This role will define and scale how secure software is built at ServiceTitan by embedding security directly into the development lifecycle, from code to production. It will reduce organizational risk by automating detection and remediation of vulnerabilities, standardizing secure architecture patterns, and eliminating entire classes of security issues at their source. By partnering closely with engineering, this role will drive a shift toward secure by default development while continuously validating defenses through testing, threat modeling, and proactive simulation.</p><p></p><p><b>
What you&rsquo;ll do:</b></p><h2 class="jobSectionHeader"><b>
Build the Secure Paved Road (Pipeline and Code)</b></h2><ul><li><p><b>
Pipeline Automation: </b>Deeply integrate GitHub Advanced Security into the CI/CD pipeline to act as automated checkpoints, providing fast feedback to engineers without manual intervention.</p></li><li><p><b>
Secure by Default Code: </b>Collaborate with Engineering to develop and maintain secure microservice templates and libraries with embedded security controls.</p></li><li><p><b>
Secrets and Supply Chain: </b>Lead hardcoded secrets mitigation efforts by automating detection and building workflows to validate compromised credentials via API.</p></li><li><p><b>
Secure SDLC Practices:</b> Drive cross functional initiatives to establish and continuously improve secure software development lifecycle practices across the organization.</p></li></ul><p></p><p><b>
Continuous Security Testing and Validation</b></p><ul><li><p><b>
Penetration Testing:</b> Lead onboarding and operation of continuous penetration testing capabilities across web applications and services.</p></li><li><p><b>
Security Assessments:</b> Participate in and help scale internal security assessments, penetration testing, and bug bounty programs.</p></li><li><p><b>
Tooling Ownership:</b> Evaluate, prototype, implement, and operate security tools including DAST, SAST, and SCA.</p></li><li><p><b>
Simulation and Validation: </b>Run proactive simulations based on emerging threats to validate defenses and identify gaps.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Architecture and Threat Modeling</b></h2><ul><li><p><b>
Security Design Reviews: </b>Lead security design reviews and threat modeling for new and existing services.</p></li><li><p><b>
Secure Architecture: </b>Develop and maintain secure architecture standards, frameworks, and reusable patterns across multiple layers of the stack.</p></li><li><p><b>
Emerging Threat Analysis: </b>Continuously analyze evolving security threats, determine relevance, and implement centralized mitigations.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Operational Support and Engineering Partnership</b></h2><ul><li><p><b>
Technical Leadership: </b>Act as the AppSec technical expert for the Security Champions Program, guiding engineers on vulnerability remediation and secure coding practices.</p></li><li><p><b>
Contextual Training: </b>Implement just in time training mechanisms that help engineers remediate vulnerabilities as they are introduced.</p></li><li><p><b>
Triage to Automate:</b> Own initial triage of vulnerability findings, identify patterns, and drive automation and guardrails to reduce recurring issues.</p></li><li><p>
Incident Response: Participate in security incident response and support post incident analysis and remediation efforts.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Continuous Improvement and Expertise</b></h2><ul><li><h2 class="jobSectionHeader"><b>
Maintain strong knowledge of current security threats, vulnerabilities, and operational best practices, applying that knowledge to continuously improve the organization&rsquo;s security posture.</b></h2></li></ul><p></p><h2 class="jobSectionHeader"><b>
What you&rsquo;ll bring:</b></h2><ul><li><p>
Experience: 7-10+ years of experience in Product/Application Security, with a strong background in software engineering.</p></li><li><p>
Coding Expertise: Proficiency in C#/.NET (preferred) or Go/Java. You must be able to read code to find vulnerabilities and write code to fix them.</p></li><li><p>
Modern AppSec: Experience moving security &quot;left&quot; using tools like GitHub Advanced Security (GHAS), dependency scanners, and secret detectors.</p></li><li><p>
Automation Mindset: Proven ability to script (Python, Go, PowerShell) and automate security tasks. You prefer building a tool to solve a problem over fixing it manually.</p></li><li><p>
AI Forward: Interest in the intersection of AI and Security, specifically in securing AI workloads, leveraging AI capabilities to embed security throughout the SDLC, and using AI agents for defense.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Why this role?</b></h2><p><b>
Own Outcomes, Not Activity:</b> Your success will be measured by real risk reduction. You will directly influence vulnerability backlog reduction, remediation velocity, and the overall security posture of the organization.</p><p></p><p><b>
Operate at the Intersection of Engineering and Security:</b> You will work side by side with engineering teams to shape how software is built, secured, and deployed. This role gives you the platform to influence architecture, development practices, and platform level controls.</p><p><b><br>
Lead the Next Evolution of AppSec:</b> You will help define how modern security teams leverage automation and intelligent systems to scale. From secure by design patterns to autonomous testing and remediation, you will be pushing the boundaries of how security is done.</p><p><b><br>
High Ownership, High Leverage:</b> You will have the autonomy to identify problems, design solutions, and implement them end to end. The work you do will scale across teams and services, amplifying your impact well beyond a single application or domain.</p><p></p><p><b>
Be Human With Us:</b><br>
Being human isn&rsquo;t about checking every box on a list. It&rsquo;s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we&rsquo;re solving. We&rsquo;re in this together. Come be human, with us.</p><p><b><br>
Use of AI Technology:</b></p><p>
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.</p><p><b><br>
What We Offer:</b></p><p>
When you join our team, you&rsquo;re not just accepting a job. You&rsquo;re making a career move. Here&rsquo;s how we&rsquo;ll support you in doing some of the most impactful work of your career:</p><ul><li><b>
Flextime, recognition, and support for autonomous work</b>: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.</li><li><b>
Holistic health and wellness benefits:</b> Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.</li><li><b>
Support for Titans at all stages of life:</b> Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.</li></ul><p><br>
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.</p>
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation, which may change over time. We comply with all applicable minimum wage laws. For candidates in the United States, the good faith salary ranges estimate for this role is Zone 1: $179,900 USD - $269,900 USD Applicable for: CA, CT, DC, MD, MA, NJ, NY, VA, and WA Zone 2: $168,200 USD - $252,200 USD Applicable for: All other US locations. International Compensation for candidates residing outside the United States will vary by location and will be discussed during the hiring process. Actual compensation within a range is determined by factors including relevant experience, skill set, qualifications, and performance. In addition to base salary, our total compensation package includes an annual bonus, equity, and a holistic suite of benefits.</div>

Staff Application Security Engineer

EnerSys

<div><p>EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products.</p><p><b>
What We&rsquo;re Offering</b></p><ul><li>
Paid time off plus paid holidays</li><li>
Medical/dental/vision insurance plan</li><li>
Life insurance, short/long term disability, tuition reimbursement, flex spending, and employee stock purchase plan</li><li>
401K plan</li><li>
Culture: We value and strive for excellence in all that we do through innovative technology by creating long lasting relationships with our stakeholders, co-workers, and customers. We continually strive to foster teamwork, engagement and enhance our employee&rsquo;s skills and competence by providing appropriate training.</li></ul><p><b>
Compensation Range:</b> $117,200 - $146,600</p><p>
Compensation may vary based on applicant's work experience, education level, skill set, and/or location.
</p><div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2></div><div><p>
The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers, DevOps teams, and security professionals to embed security into the full software development lifecycle. Collaborate within an expanding Cybersecurity team, and work closely with internal EnerSys teams to ensure new and continued compliance with cybersecurity frameworks and required programs and initiatives.</p></div></div><div><div><h2 class="jobSectionHeader"><b><br>
Essential Duties and Responsibilities</b></h2></div><div><ul><li>Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.</li><li>Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.</li><li>Define, maintain, and enforce secure coding standards, patterns, and best practices.</li><li>Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.</li><li>Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.</li><li>Support threat modeling, risk assessments, and security architecture reviews for applications.</li><li>Ensure that all security practices meet regulatory and compliance requirements.</li><li>Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.</li><li>Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).</li><li>Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.</li><li>Monitor and respond to application security threats, incidents and vulnerabilities.</li><li>Stay up to date on regulatory developments and industry trends.</li><li>Manage and maintain third-party vendor and consultant relationships .</li><li>Perform other duties as assigned.</li></ul><p><b>
SUPERVISORY RESPONSIBILITIES: </b>N/A</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Qualifications</b></h2></div><div><p>
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><p>
Must have an active passport and be willing to travel internationally.</p><p><b>
Required Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in a technical field (e.g., Computer Science, Information Systems, Cybersecurity).</li><li>
5+ years of experience in Information Security, with at least 3 years focused on application security, secure development, or DevSecOps.</li><li>
Demonstrated experience building and scaling an application security program, either as the lead or a key contributor.</li><li>
Strong knowledge of OWASP Top 10, OWASP ASVS, SANS Top 25, and secure SDLC methodologies.</li><li>
Hands-on experience with application security testing tools such as Burp Suite, Fortify, Checkmarx, Veracode, and ZAP.</li><li>
Experience conducting threat modeling, penetration testing, secure software development, and secure architecture reviews.</li><li>
Practical experience securing cloud environments (AWS or Azure) and implementing cloud-native security controls.</li><li>
Familiarity with Kubernetes security, container hardening, and runtime protection.</li><li>
Strong communication skills with the ability to collaborate and influence across technical and non-technical teams.</li></ul><p><b>
Preferred Qualifications</b></p><ul><li>
Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CEH, or GIAC Cloud Security.</li><li>
Experience securing embedded systems and mobile applications.</li></ul><div><b>
Reasoning Ability</b><br>
<ul><li>Problem management / resolution skills; project management skills; generally accepted security principles.</li><li>Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis.</li></ul>
TRAVEL REQUIRED: Up to 15%</div></div></div><div><div><h2 class="jobSectionHeader"><b>
General Job Requirements</b></h2></div><ul><li>
This position will work in an office setting, expect minimal physical demands.</li></ul></div></div><p></p><p><br>
EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.</p><p></p><p><br>
We use artificial intelligence to screen, assess and select applicants for open positions, including for the purposes of reviewing and ranking application materials and scoring answers to application questions. Accordingly, decisions about your application and eligibility for employment with EnerSys may be made based exclusively on the automated processing of the personal information that you submit in your application materials.</p></div>

Application Security Engineer (REMOTE)

Spry Methods, Inc

<div><div><div><div><b>Who We&rsquo;re Looking For (Position Overview):</b></div>
The Web Developer Security Engineer protects mission-critical web applications, application programming interfaces (APIs), and sensitive data by embedding security across the software development lifecycle. This role combines application security engineering, secure software development, vulnerability remediation, monitoring, and compliance support.</div></div>
<div><div><h3 class="jobSectionHeader"><b>What Your Day-To-Day Looks Like (Position Responsibilities):</b></h3><div><div><div>
<div>
<div><ul><li><p>Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs.</p>
</li>
</ul></div><div><ul><li><p>Drive the vulnerability lifecycle through threat modeling, security assessments, and technical validation of remediation actions.</p>
</li>
</ul></div><div><ul><li><p>Support secure design patterns, data protection mechanisms, and secure communication protocols across applications and supporting services.</p>
</li>
</ul></div></div><div><div><ul><li><p>Review and analyze web server and application logs to detect anomalies and indicators of compromise.</p>
</li>
</ul></div><div><ul><li><p>Implement automation scripts for threat intelligence integration and application security monitoring.</p>
</li>
</ul></div><div><ul><li><p>Participate in audits, risk assessments, and security authorization activities tied to federal frameworks.</p>
</li>
</ul></div></div></div></div></div></div></div><div><div><h3 class="jobSectionHeader"><b>What You Need to Succeed (Minimum Requirements):</b></h3><div><div><div>
<div>
<ul><li><p>Minimum of three years of experience in web application security, application security engineering, or secure software development lifecycle work.</p>
</li>
</ul></div><div><ul><li><p>Hands-on experience in secure software development, DevSecOps automation, and vulnerability remediation.</p>
</li>
</ul></div><div><ul><li><p>Proven experience with .NET technologies, HTML5, CSS3, JavaScript, representational state transfer (REST) APIs, and structured query language (SQL).</p>
</li>
</ul></div><div><ul><li><p>Ability to leverage AI-assisted development tools and scripting languages to automate monitoring and compliance efforts.</p>
</li>
</ul></div><div><ul><li><p>Strong understanding of the Open Worldwide Application Security Project (OWASP) Top 10, secure coding standards, web application firewalls (WAFs), file integrity monitoring, and security testing tools.</p>
</li>
</ul></div><div><ul><li><p>Ability to perform risk assessments and provide remediation guidance for core systems and dependencies.</p>
</li>
</ul></div><div><ul><li><p>Bachelor's degree or higher in computer science, cybersecurity, information systems, engineering, or a related field.</p>
</li>
</ul></div><div><ul><li><p>Ability to meet federal screening and suitability requirements prior to start.</p>
</li>
</ul></div><div><ul><li><p>Current security certifications maintained for a minimum of five years, spanning application security (such as CSSLP, GWEB, or CASE), offensive security (such as OSWE or OSCP), and foundational security (such as Security+ or GSEC); expired or never-used certifications will not be considered.</p>
</li>
</ul></div></div></div></div></div></div><div><div><h3 class="jobSectionHeader"><b>Ideally, You Also Have (Preferred Qualifications):</b></h3><div><div><div>
<div>
<ul><li><p>In-depth experience with federal cybersecurity frameworks and authorization processes.</p>
</li>
</ul></div><div><ul><li><p>Experience with threat modeling, resilient security architecture, cloud security, and container security.</p>
</li>
</ul></div></div></div></div></div></div><div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Web Developer Security Engineer

BOK Financial

<div><div>Req ID: 78048</div>
<div>Location: Tulsa -TUL</div>
<div>Areas of Interest: Software Development; Information Security</div>
<div>Pay Transparency Salary Range: Not Available</div>
<div>Application Deadline: 07/31/2026</div>
<div>BOK Financial Corporation Group includes BOKF, NA; BOK Financial Securities, Inc. and BOK Financial Private Wealth, Inc. BOKF, NA operates TransFund and Cavanal Hill Investment Management, Inc. BOKF, NA operates banking divisions: Bank of Albuquerque; Bank of Oklahoma; Bank of Texas and BOK Financial&reg;.</div>
<div><div><div><h2 class="jobSectionHeader">
Bonus Type</h2>
</div><div><div>Discretionary</div></div></div><div><div><h2 class="jobSectionHeader">
Summary</h2>
</div><div><div>
Our team operates at the forefront of innovation, vigilance, and strategic risk management. We combine deep industry expertise with advanced analytics and a disciplined approach to proactively identify and mitigate emerging threats across the organization. Through continuous monitoring, comprehensive assessments, and strong cross-functional partnerships, we deliver tailored security solutions that strengthen BOKF&rsquo;s resilience.</div><div></div><div><br>
We are passionate about advancing security maturity across the enterprise&mdash;collaborating closely with teams to provide actionable insights, champion best practices, and enhance controls. Our work empowers BOKF to pursue its strategic goals with confidence in an evolving threat landscape.</div></div></div><div><div><h2 class="jobSectionHeader">
Job Description</h2>
</div><div><div>
As an Application Security Engineer III, you will play a key leadership role in advancing BOKF&rsquo;s application security posture. You will drive the implementation and optimization of security capabilities across the Application Protection portfolio, including WAF, API security, DAST, SAST, IaC, SCA, and SIEM/SOAR.</div><br>
<div></div>
<div>
In this role, you will lead threat modeling and vulnerability assessments for internally developed applications and APIs, design and implement custom security policies and controls, and guide the response to application-layer incidents. You will serve as a subject matter expert, mentoring junior engineers while contributing to the design of advanced detection and prevention strategies.</div><br>
<div></div>
<div>
You will stay ahead of evolving threats&mdash;including OWASP Top 10 risks, API vulnerabilities, and software supply-chain attacks&mdash;and apply that knowledge to strengthen defenses. The role also includes performing forensic and root cause analysis, partnering with risk, legal, and compliance teams to support regulatory requirements, and developing custom code to enhance application security capabilities.</div><br>
<div></div>
<div>
As BOKF embraces AI-enabled development and security tooling, you will leverage approved AI capabilities to accelerate workflows while ensuring accuracy, safeguarding sensitive data, and maintaining strong governance. You will also assess and mitigate risks associated with AI/LLM-enabled applications and third-party services, including prompt injection, data leakage, and insecure integrations, while helping implement effective monitoring and controls.</div></div></div><div><div><h2 class="jobSectionHeader">
Team Culture</h2>
</div><div><div>
Our team thrives in a dynamic and collaborative environment where curiosity, ownership, and continuous improvement are foundational. We encourage innovative thinking, open knowledge-sharing, and proactive problem-solving.</div><br>
<div></div>
<div>
By working together to address complex security challenges, team members are empowered to expand their expertise, influence meaningful outcomes, and shape the future of application security at BOKF. Our strong partnerships across the organization and commitment to excellence ensure we remain resilient and forward-looking.</div></div></div><div><div><h2 class="jobSectionHeader">
How You'll Spend Your Time</h2>
</div><div><ul><li>You will lead the design and implementation of advanced application security architectures and controls across the SDLC, including secure CI/CD guardrails.</li><li>You will conduct threat modeling and in-depth vulnerability assessments for applications and APIs, partnering with stakeholders to prioritize remediation.</li><li>You will develop, tune, and maintain application security controls, including WAF/API policies and DAST/SAST/SCA/IaC scanning capabilities.</li><li>You will oversee application-layer incident response, including triage, containment, and forensic/root cause analysis.</li><li>You will evaluate and define security controls for AI/LLM-enabled features and integrations, including risks related to data protection, model trust, and misuse scenarios.</li><li>You will leverage AI-enabled security tools to enhance detection, analysis, and response while validating outputs and protecting sensitive data.</li><li>You will provide technical leadership by mentoring team members and leading initiatives through successful delivery with minimal oversight.</li><li>You may perform other duties as assigned.</li></ul></div></div><div><div><h2 class="jobSectionHeader">
Education &amp; Experience Requirements</h2>
</div><div><div>
This role typically requires a Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field, along with 5+ years of experience in Cyber Security or a related technical discipline; alternatively, 7+ years of relevant experience may be considered in lieu of a degree.<br>
A Master&rsquo;s degree, CISSP, or equivalent certifications are preferred.<br>
________________________________________</div><br>
<div></div>
<div>
Skills<br>
<ul><li>Advanced expertise in configuring and optimizing application security tools (WAF, API security, DAST, SAST, IaC, SCA, SIEM/SOAR) to deliver effective and scalable protection.</li><li>Strong understanding of application threat intelligence and the ability to identify and mitigate both known and emerging attack vectors.</li><li>Proven experience leading application security incident response, including triage, containment, and root cause analysis.</li><li>Demonstrated ability to lead cross-functional initiatives involving development, DevOps, and risk teams.</li><li>Excellent analytical and problem-solving skills, with a structured approach to complex challenges.</li><li>Advanced scripting capabilities (e.g., Python, Bash, Go, PowerShell) to automate security processes and workflows.</li><li>Experience securing CI/CD pipelines and cloud-native applications across AWS, Azure, and GCP.</li><li>Strong knowledge of cryptography, TLS, secrets management (e.g., HashiCorp Vault), and key lifecycle management.</li><li>Ability to clearly communicate complex security concepts to both technical and non-technical stakeholders.</li><li>Experience leveraging data analysis tools (e.g., Splunk, Elasticsearch, Excel) to drive insights and metrics.</li><li>Deep understanding of application risk management principles and mitigation strategies.</li><li>Familiarity with AI/LLM security risks (e.g., prompt injection, data leakage, supply-chain risk) and practical implementation of controls.</li><li>Ability to use AI-assisted tools responsibly to enhance productivity while validating results and protecting sensitive information.</li></ul></div></div></div></div><div>
BOK Financial Corporation Group is a stable and financially strong organization that provides excellent training and development to support building the long term careers of employees. With passion, skill and partnership you can make an impact on the success of the bank, customers and your own career!<br>
Apply today and take the first step towards your next career opportunity!<br>
<br>
The companies in BOK Financial Corporation Group are equal opportunity employers. We are committed to providing equal employment opportunities for training, compensation, transfer, promotion and other aspects of employment for all qualified applicants and employees without regard to sex, race, color, religion, national origin, age, disability, pregnancy status, sexual orientation, genetic information or veteran status.</div>
<div>Please contact recruiting_coordinators@bokf.com with any questions.</div></div>

Security Engineer III - Application Security

Cartamundi East Longmeadow LLC

<div><p><i>Join the worldwide leader in playing cards and in &ldquo;play&rdquo; solutions. Play is what keeps us going, and it always has been our greatest motivation. That's why we </i><b><i>live different</i></b><i>, </i><b><i>play different</i></b><i>.</i></p><p>
We are seeking an experienced <b>Product Security Engineer </b>to safeguard the confidentiality and integrity of intellectual property related to Cartamundi&rsquo; s collectible trading card products. This role combines legal knowledge, technical expertise, and operational oversight to prevent theft, counterfeiting, and unauthorized use of proprietary assets across both physical and digital environments.</p><p><b>
What you&rsquo;ll do as a Product Security Engineer:</b></p><div><ul><li>
Ensure product security throughout the product lifecycle, including file transfer portals, internal databases, and production floors.</li><li>
Implement and enforce group security policies, standards, controls and best practices, to prevent product leaks and theft.</li><li>
Conduct risk assessments and implement corrective and preventive actions across all production and supply chain touchpoints.</li><li>
Collaborate with internal teams and subcontractor partners to ensure compliance with Cartamundi&rsquo;s security standards.</li><li>
Monitor and audit the local security systems and processes, ensuring continuous improvement and alignment with industry best practices.</li><li>
Develop and maintain security metrics and dashboards to measure and report product and platform security performance</li><li>
Manage the local security systems (CCTV, access control, intrusion detection); periodically review logs and events to identify production floor risks</li><li>
Create a strong product security focus in the local company culture and educate external partners on product security procedures.</li><li>
Continuously monitor emerging product ‑security threats, vulnerabilities, and attack vectors, and translate insights into actionable recommendations for Group Product Security team.</li><li>
Align with Group Product Security leadership and support continuous improvement initiatives</li><li>
In partnership with the Group Product Security team, lead local investigations into suspected breaches, counterfeiting, or IP theft, analyze root causes, and lead incident response and mitigation efforts</li><li>
Be the local single point of contact/expert for all local security related matters.</li><li>
Coordinate with Legal, law enforcement and external agencies when required</li></ul></div><p><b>
We&rsquo;re looking for an IP &amp; Product Security Engineer with:</b></p><div><ul><li>
5&ndash;8+ years in manufacturing security, loss prevention, or physical IP protection</li><li>
Proven experience in security management, preferably in a manufacturing or product security-sensitive environment.</li><li>
Bachelor/Master in IT, engineering, product security or equal through experience.</li><li>
Additional certificates like CISSP / CISM / CISA, ASIS CPP/PSP, TAPA-knowledge are a plus.</li><li>
Knowledge of access control, CCTV, camera legislation, track &amp; trace, anti‑theft designs</li><li>
Strong understanding of physical and digital security systems, risk management, and compliance frameworks.</li><li>
Excellent analytical, investigative, and problem-solving skills</li><li>
Ability to work internationally, cross-functionally and manage external partners.</li></ul></div><p>
Ability to work internationally, cross-functionally and manage external partners.</p><p>
 Benefits a <b>Product Security Engineer</b> can expect from Cartamundi:</p><ul><li>
Climate controlled facility</li><li>
401(k) with company match</li><li>
Health, dental, and vision insurance starting day one</li><li>
HSA (Health Savings Account) and FSA (Flexible Savings Account)</li><li>
Life insurance</li><li>
Short-Term and Long-Term Disability</li><li>
Paid time off</li><li>
Tuition reimbursement</li><li>
Employee discounts on daycare, gym memberships, travel, and much more</li></ul><p><b>
Physical Requirements and Working Conditions:</b></p><p>
 The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation(s). Our manufacturing Plant is comprised of enclosed office and manufacturing space. This position requires the ability to:</p><ul><li>
Work effectively with other team members, through use of verbal and written communication, including typing, through use of fingers on a keyboard.</li><li>
May need to perform sedentary work, sitting for long periods of time) on various computer systems</li><li>
This <b>Product Security Engineer </b>position is located in our East Longmeadow, MA facility</li></ul><p><b>
Apply today and discover the magic of making a difference at Cartamundi!</b></p><p><i>
Cartamundi does not discriminate based on race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities. </i><i>This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS </i><i>dhs.gov/e-verify</i><i>.</i></p><p><i>
Candidates must be 18 years old to work for Cartamundi. No agencies please. No sponsorship available.</i></p><p><b>
About Cartamundi:</b></p><p>
At Cartamundi, we're all united by our common belief that world is better with play. Play is what keeps us going, and it always has been our greatest motivation. That's why we live different and play different. To us, it is not just an activity. It is a guiding mindset that reminds us to have fun, to be fair, to connect with people &ndash; across cultures and generations &ndash; and to embrace shared experiences.</p><p>
We are a worldwide leader in playing cards and in &ldquo;play&rdquo; solutions.</p><p>
Our owned brand portfolio includes a suite of heritage brands which go back as far as 1848, including global brands like Bicycle&reg;, HRO&reg;, Bee&reg;, Copag&reg;, Shuffle&reg; and many locally loved brands. These brands combine craftsmanship with innovation as the basis for their continued relevance and positive contribution to the local communities that love and use these brands.</p><p>
At Cartamundi, we have significant expertise in printing; our presses have been running since 1765. Today, our company has become the largest playing cards and board game manufacturer in the world and the trusted partner of leading toy companies. We make well-known brands such as Monopoly&reg;, Uno&reg;, Magic: The Gathering&reg;, Guess Who &reg;, Pok&eacute;mon&reg;, Trivial Pursuit&reg; every day.</p><p>
As we look into the future and how entertainment evolves, we are bringing the digital world to the physical world and vice versa. We have a dedicated team of experts that is looking into future technologies, products, and applications that can get our consumers and communities to truly live different and play different.</p><p>
We are still a family-owned company with headquarters in Belgium and have a global network of 16 manufacturing facilities, 6 design centers, 1 digital studio and 1 global R&amp;D center.</p></div><p></p>

Product Security Engineer

Apple

<p>Do you want first crack at new Apple Pay products? Come help them be more secure by breaking them first!<br>
<br>
Join our Apple Pay Security Engineering team and help us deliver the safest and best user-experience. We work on Payments, Transit, Access, &amp; Identity, across hardware, software, and server. If you're passionate about digital security and customer safety, we may have the job for you.<br>
<br>
<b>Description</b><br>
<br>
You're a security engineer at heart: a pentester who breaks hardware, software, and services to find what others miss. You use AI to move faster and improve the tooling as you go: not shipping product features but building the Skills, Agents, and workflows that make our security testing sharper. Above all, you can disagree with the AI, prove it wrong, and make it better instead of rubber-stamping its results.&quot;,&quot;responsibilities&quot;:&quot;Develop AI workflows to perform security review and security testing<br>
<br>
Develop Skills and Agents that instill security best practices into every phase of the SDLC: design, implementation, review, build/CI-CD, and post-launch<br>
<br>
Threat model development and secure design assessment of hardware and software<br>
<br>
Hands-on testing of hardware and software<br>
<br>
Validate and challenge AI findings, not just consume them<br>
<br>
<b>Preferred Qualifications</b><br>
<br>
Superior problem solving and debugging skills<br>
<br>
Understanding of the use of various cryptographic algorithms (RSA, AES, SHA, etc.)<br>
<br>
Able to clearly communicate across many teams (Can you nicely tell the developer that they have a bug?)<br>
<br>
Ability to propose new designs and architectural improvements (Can you redesign what you just broke?)<br>
<br>
Experience either shipping software or integrating security into every stage of the software lifecycle.<br>
<br>
<b>Minimum Qualifications</b><br>
<br>
Drive and agency: You know how to use tools to learn new areas, experiment, and develop security issue discovery capabilities. You&rsquo;re curious and interested in learning new areas. You have a sense of ownership and pride in improving the environment.<br>
<br>
Security engineering foundation: You&rsquo;ve threat modeled hardware and/or software designs, determining where attacks would come from and what protections exist in a design. You&rsquo;ve performed hands-on security testing (pentesting, negative testing, or equivalent). You&rsquo;re skilled at security code reviews.<br>
<br>
AI/agentic fluency: You have hands-on experience using agentic/LLM-based coding tools. You&rsquo;re able to build and refine Skills, Agents and AI workflows, not just operate them. You&rsquo;re able to independently verify or refute a finding rather than accept it at face value<br>
<br>
<b>Pay &amp; Benefits</b><br>
<br>
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $181,100 and $318,400, and your base pay will depend on your skills, qualifications, experience, and location.<br>
<br>
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits<br>
<br>
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</p>

Security Engineer - Apple Pay

Search 8050+ Application security engineer jobs near you this June. New roles added regularly across leading industries. Apply today.