Senior Application Security Engineer
M&T BankFull Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
Candidates must have 5+ years of experience in application security, secure software development, or related fields. Required experience includes hands-on work with SAST, SCA, DAST, Secrets Management, and API Security solutions, as well as securing containers, web, APIs, and cloud-native workloads (AWS, Azure, GCP). Strong knowledge of OWASP top 10s and modern attack vectors is essential, along with proficiency in at least one programming language such as Python, Go, Java, or TypeScript. Excellent communication and presentation skills are necessary to effectively engage with diverse stakeholders at various levels. Desired qualifications include application security certifications (OSCP, GWAPT, GCPN etc) and experience with Threat Modeling.
The Senior Application Security Engineer will lead application security initiatives, design, build, and implement security best practices across different teams. They will implement and enhance security automation within CI/CD pipelines, maintain application security solutions, measure their effectiveness, and drive continuous improvement based on strategic priorities. This role involves developing and maintaining secure coding guidelines and security training for engineers, investigating security vulnerabilities, and supporting incident response as needed. Additionally, the engineer will research emerging threats, vulnerabilities, and attack techniques to proactively secure applications.
Cloud communications platform for developers
Twilio provides a cloud communications platform that enables developers to add various communication features like voice, messaging, video, and email to their applications. By using Twilio's APIs, developers can easily integrate these functionalities into their software, allowing for seamless communication with users. What sets Twilio apart from its competitors is its flexible pay-as-you-go pricing model, which charges clients based on their actual usage, making it suitable for businesses of all sizes, from startups to large enterprises. The company's goal is to empower businesses across different industries, such as healthcare, finance, retail, and education, to enhance their communication strategies and improve customer engagement.