Senior Application Security Engineer

Role: Senior Application Security Engineer focused on supporting and enhancing application security testing within biopharma software development. Primary objectives include implementing, managing, and integrating application security tooling (SAST, DAST, IAST, SCA) into CI/CD pipelines, supporting developers in vulnerability remediation, and promoting secure coding practices. Responsibilities encompass acting as frontline support for security findings, developing comprehensive security reports, and evangelizing security best practices across development teams. Qualifications: Bachelor's degree with 7+ years (Master's with 6+ years, PhD with 2+ years) in application security and software development. Expertise in securing code across languages like Java and Node.js, integrating security into DevSecOps workflows, and working with cloud platforms (AWS, Azure). Strong knowledge of vulnerabilities (OWASP Top 10), infrastructure as code (Terraform, CloudFormation), and security tooling (Snyk, Endor Labs) is required. Preferred skills include consolidating security findings, automating workflows with Python, and collaborating on risk management. High-value specifics: experience supporting large-scale application security in a regulated biopharma environment, with emphasis on secure development practices, cloud security, and vulnerability management. Work setup details are not specified.