Senior Cyber Security Application Security Engineer

What you'll do

• Drive secure software development by partnering with engineering teams to integrate security, privacy, and compliance requirements throughout the software development lifecycle.

• Lead threat modeling, secure design reviews, and application security assessments to identify risks early and improve the resilience of products and services.

• Build and enhance automated security solutions that consolidate, prioritize, and communicate security findings to development teams and key stakeholders.

• Advance vulnerability management programs by improving processes that help teams identify, remediate, and prevent security issues at scale.

• Contribute to security automation and self-service capabilities that reduce manual effort and enable teams to adopt security best practices efficiently.

• Stay current on emerging cyber security trends, techniques, and technologies, and apply those insights to continuously improve Blackbaud’s application security strategy and engineering practices.
 

What you'll bring

• 5+ years of experience in application security, including hands-on experience with dynamic application security testing, static application security testing, software composition analysis, and attack surface management tools.

• 3+ years of experience developing automation or tooling using Python, Bash, and/or PowerShell, with the ability to improve security processes through engineering solutions.

• Experience implementing DevSecOps practices and integrating security controls, testing, and monitoring into continuous integration and continuous delivery pipelines.

• Strong understanding of secure software development, modern application architectures, microservices, vulnerability management, and secure design principles.

• Experience collaborating with software engineers and platform teams to deliver impactful security initiatives, along with familiarity with industry certifications such as CompTIA Security+, CASP+, Certified Ethical Hacker (CEH), or Certified Secure Software Lifecycle Professional (CSSLP).