Application Security Engineer, Fellow

- Lead the development of a comprehensive API security program. - Collaborate with key stakeholders to establish a detailed inventory of APIs, endpoints, and routes. - Enhance existing AppSec processes by integrating technical controls for compliance and governance across the API ecosystem. - Conduct penetration testing on various products and systems, including web applications and mobile devices. - Cooperate closely with engineering teams to design, test, and maintain AppSec implementation processes. - Partner with DevSecOps to maintain and enhance shift-left security scanning procedures. - Coordinate vendor penetration testing services with internal development teams. - Collaborate with stakeholders to formulate remediation strategies. - Demonstrate practical exploitation of security vulnerabilities. - Automate the delivery of application security metrics through improved processes. - Review security scanning outputs to identify false positives and assist developers with remediation efforts. - Act as the application security subject matter expert across all domains. - Engage in threat modeling exercises. - Clearly communicate details of vulnerabilities, associated risks, and potential impacts to application owners and stakeholders. - Mentor junior team members and interns. - Design, implement, and support security-focused tools and services. - Create tools to enhance security testing, reporting, and monitoring efficacy. - Undertake additional duties as assigned.