Senior Engineer - Application Security
Bristol Myers SquibbMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessLog in to see why each signal reads the way it does.
Job Description
Structured overview of role & requirementsAbout This Role
Lead implementation and continuous improvement of SAST, SCA, and DAST security testing tools across applications.
Plan and conduct penetration testing for web applications and APIs, support remediation and retesting efforts.
Integrate automated security checks into CI/CD pipelines and drive adoption of AI-assisted code scanning technologies.
Minimum Requirements
5+ years of hands-on application security experience including SAST, SCA, DAST, and penetration testing.
Proficiency in coding or scripting languages such as Python or Java to develop automation and PoCs.
Experience with cloud security in multi-cloud environments (AWS, Azure, GCP) and integrating security into CI/CD workflows.
Work Experience Required: Minimum 5+ years in application security and penetration testing.
Ideal Candidate Profile
Experienced in securing software development lifecycle with strong understanding of OWASP Top 10, CWE, DevSecOps, and vulnerability management.
Comfortable leading cross-functional security initiatives and mentoring junior team members.
Skilled in using automation, AI-assisted code scanning, and cloud-native security platforms like Wiz.io for enterprise-scale application security programs.