Senior Application Security Engineer
Posted 1ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Application Security Engineer securing Finalsite’s school communications, enrollment, and marketing platform. Remediating .NET/C# vulnerabilities and enforcing secure development practices for global education customers.
Responsibilities:
- Identify, triage, and remediate security vulnerabilities across web applications and proprietary software systems
- Conduct technical vulnerability triage using SAST, DAST, penetration testing reports, and bug bounty programs
- Modify and refactor .NET/C# code to remediate security vulnerabilities according to risk prioritization schedules
- Develop, maintain, and enforce secure coding standards across development teams
- Implement reusable secure coding patterns such as ORM and output encoding frameworks
- Assist software developers with code reviews and remediation of complex security flaws
- Monitor emerging web application threats, exploit techniques, and OWASP Top 10 updates
- Ensure application security controls comply with central, state, and international data protection laws
- Support compliance with FERPA, COPPA, GDPR, and UK GDPR requirements
Requirements:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
- Minimum 7+ years of dedicated hands-on experience in application security
- Strong, hands-on software development experience with .NET/C# refactoring and remediation
- In-depth understanding of web application vulnerabilities, remediation techniques, and the OWASP Top 10
- Direct experience working with SAST, DAST, third-party penetration testing reports, and bug bounty management
- Excellent problem-solving skills, analytical capabilities, and strong cross-functional communication and collaboration skills
- Current and continued permanent residency within India
- Preferred: Experience securing applications deployed in multi-cloud environments such as AWS, GCP, or Azure
- Preferred: Knowledge of FERPA, COPPA, GDPR, and SOC 2 standards
- Preferred: Professional security certifications such as CASE, GWAPT, GWEB, or CEH
Benefits:
- 100% fully remote employment
- Full-time employment
- Equal opportunity workplace and affirmative action employer
- Reasonable accommodation for persons with disabilities or special needs

















