Lead Application Security Engineer
M&T Bank- Full Time
- Expert & Leadership (9+ years)
Candidates should have experience with cloud platforms, particularly GCP, and possess a strong understanding of common attacker tools and techniques. Proficiency in vulnerability assessment tools is required, along with strong communication skills to explain technical security concepts to non-technical audiences. Experience with programming languages such as Kotlin, Typescript, and NodeJS, as well as Kubernetes, is a plus. Additional training or certifications in security, such as GIAC or OSCP, and a history of responsible disclosure are advantageous.
The Senior Application Security Engineer will review the Airwallex platform's code to identify security issues and assist engineers in finding secure solutions. They will proactively work with product and engineering teams to assess risk and provide guidance on secure coding practices. The role includes advocating for security architecture best practices, educating teams on secure code and design, testing applications internally and externally, and staying updated on the latest threats. Additionally, they will coordinate third-party security reviews, manage identity and access standards, and review cloud provider usage for risk mitigation.
Cross-border payment solutions for businesses
Airwallex provides cross-border payment solutions for businesses of all sizes, including small to medium-sized enterprises and large corporations. The company offers a range of financial services such as multi-currency accounts, international money transfers, foreign exchange services, and payment gateway solutions. These services are designed to facilitate efficient and cost-effective international transactions. Airwallex uses advanced technology to ensure that these transactions are fast and secure. Unlike many competitors, Airwallex focuses on building financial infrastructure that supports the digital economy, allowing businesses to operate seamlessly across borders. The company's goal is to simplify global payments and make them accessible to businesses worldwide.