Application Security Engineer

Role : ASC Champions / Application Security CenterLocation : Charlotte, NC (Hybrid)Type : ContractMust have : App Security, App Development, Risk, Vulnerability• Minimum 10+ years of relevant experience.• Strong security and vulnerability expertise across application and infrastructure layers.• Proficiency in Application Development, Application Security, and Security Services.• Solid understanding of Risk Management, Vulnerability Assessment, and Remediation.• Expertise in SDLC (Software Development Lifecycle) and Product Lifecycle Support.• Infrastructure and application security knowledge at a senior/lead level.• Go-getter attitude with ability to manage large, complex platform portfolios.• Familiarity with CISO organization structure and enterprise security governance.Required Qualifications• 10+ years of experience in application security, application development, or related cybersecurity roles.• Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).• Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.• Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.• Excellent stakeholder management and communication skills; ability to influence without direct authority.• Experience in financial services or banking industry strongly preferred.Preferred Qualifications• Certified Information Systems Security Professional (CISSP), Certified Application Security Engineer (CASE), or CSSLP.• Experience working in a large enterprise banking environment with multiple business units.• Familiarity with DevSecOps toolchains (Jenkins, GitHub Actions, SonarQube, Veracode, Checkmarx, Snyk).