Senior Application Security Engineer
M&T BankFull Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
Candidates should possess a Bachelor’s degree in Computer Science, Information Security, or a related field, along with a minimum of 7 years of experience in application security, including at least 3 years in a managerial role. Strong experience in conducting VAPT (Vulnerability Assessment and Penetration Testing) is required, as is knowledge of OWASP principles and secure coding practices. Experience with cloud security and API security is highly desirable.
The Application Security Manager will guide security and privacy initiatives by participating in design reviews and threat modeling sessions, ensuring security is embedded throughout application development. They will collaborate with developers and product managers to ensure secure application development and hardening, aligning with industry best practices. The role involves conducting regular VAPT, providing expert guidance to developers on addressing and fixing security vulnerabilities, performing code reviews, and evaluating and integrating security testing tools like SAST, DAST, and SCA into the CI/CD pipeline. Additionally, they will develop and promote secure coding practices, educate developers and QA engineers on security standards, and actively participate in application design discussions to integrate security from the beginning.
Cloud-native payment card processing platform
Zeta provides a platform for payment card processing that is designed for banks, financial institutions, and fintech companies. Their main product, the Omni Stack, allows clients to easily create and manage digital credit, debit, and prepaid card programs. This platform works by integrating with existing systems through APIs, which helps streamline the payment processing experience. Zeta stands out from its competitors by focusing on cloud-native solutions and ensuring compliance with important regulations, which helps build trust with their clients. The company's goal is to make payments seamless and less noticeable in everyday transactions, moving towards a future where payments are 'invisible'.