As a Senior Application Security Engineer in FIS Cybersecurity, you will be a hands-on technical leader in our Attack Surface Management function. You will identify, assess and reduce security risk across web, API, mobile, cloud-native and AI-enabled applications that support global financial services.
- Own and continuously improve the application attack surface management program.
- Discovering, inventorying and risk-ranking internet-facing applications, APIs, mobile apps and cloud assets, and finding shadow IT and unmanaged exposure.
- Perform and oversee static application security testing (SAST) and dynamic application security testing (DAST).
- Tune rulesets, triage findings, reduce false positives and integrate scanning into CI/CD pipelines.
- Conduct in--depth manual source code reviews across languages such as Java, C#/.NET, Python, JavaScript/TypeScript, Cobol, Go and Kotlin/Swift.
- Nice to have: OWASP Top 10
- Nice to have: OWASP API Security Top 10
- Nice to have: SANS/CWE Top 25
- Nice to have: AI security
- Nice to have: PCI DSS compliance
