Senior Engineer - Application Security
Bristol Myers SquibbMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessLog in to see why each signal reads the way it does.
Job Description
Structured overview of role & requirementsAbout This Role
Lead implementation and continuous improvement of SAST, SCA, and DAST security practices across the software development lifecycle.
Plan and conduct penetration testing on web applications and APIs, validate findings, communicate impact, and support remediation efforts.
Integrate automated security checks into CI/CD pipelines, drive adoption of AI-assisted code scanning, and mentor junior team members.
Minimum Requirements
5+ years of hands-on experience in application security including SAST, SCA, DAST and penetration testing of web apps and APIs.
Experience with secure SDLC, OWASP Top 10, CWE, DevSecOps, vulnerability management, and integration of security testing into CI/CD pipelines.
Coding/scripting skills in Python, Java, or similar, with ability to develop proof-of-concept exploits and automate tools.
Experience with cloud security tools and multi-cloud environments (AWS, Azure, GCP).
Ideal Candidate Profile
Experienced in leading application security initiatives including governance, risk tracking, and stakeholder communication.
Skilled in automation and tooling integration for application security in developer workflows and pipelines.
Familiar with multi-cloud security assessment tools (e.g., Wiz.io) and comfortable working across complex cloud environments.