Senior Application Security Engineer
M&T BankFull Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
The ideal candidate will have experience with application security and vulnerability management, including familiarity with CVSS and tools like OWASP ZAP, Veracode, Rapid7, and Wiz.IO. They should possess working knowledge of encryption, authentication, secure data transmission, network security principles, firewall configurations, SSO and MFA using OKTA, and directory services like MS Active Directory. Experience with CyberArk PAM, Splunk SIEM, Tanium, MS Defender, IBM Guardium, Cyera, Wiz.IO for CSPM, secrets management (AWS Secrets Manager, Azure Key Vault, GCP Secrets Manager), key management (Thales, AWS KMS/HSM), SailPoint, and Cycognito is also required.
The Application and Security Management Analyst will collaborate with technical and business teams to address security flaws and implement remediation plans. They will oversee application security tasks, ensuring alignment with audit requirements and internal policies, and support change and incident management processes, focusing on high-priority incidents. The analyst will provide guidance to development and support teams on security-related ticket requirements and process expectations, acting as a liaison with internal stakeholders. Responsibilities also include supporting governance and administrative functions, such as audit preparation and policy development, and compiling and delivering regular security metrics reports.
Travel booking platform for flights, hotels, rentals
Expedia Group operates in the travel industry, offering a wide range of services for travelers and travel-related businesses. It connects users with options for flights, hotels, car rentals, vacation packages, and activities through its various brands, including Expedia, Hotels.com, and Vrbo. Travelers can easily find and book trips that match their preferences and budgets. The company earns revenue primarily through commissions on bookings and advertising from travel service providers looking to promote their offerings. Additionally, Expedia Group supports its partners by providing access to valuable data and technology, helping them improve their operations and grow their businesses. The goal of Expedia Group is to create a seamless travel experience for users while maximizing the potential of its partners.