Principal Application Security Engineer

Job summary

JOB DESCRIPTION: Building trusted markets — powered by our people At Cbo***, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy.

Benefits

Qualifications

• and mitigations for common vulnerability classes such as SSRF, injection, and access control flaws
• Provide principal-level guidance for high-risk code and design changes, resolving complex security tradeoffs and driving remediation approaches that are durable, scalable, and aligned to engineering realities
• Act as a senior technical partner to engineering leadership, influencing roadmaps, architecture decisions, and secure-by-default design patterns across the organization
• Kubernetes, Container & DevSecOps Security
• Software Vulnerability Management & Security Enablement
• Develop and champion secure coding guidance, reusable security patterns, and enablement programs that raise engineering capability and create lasting improvements in how teams design and build software
• Lead security design support during incident response and post-incident follow-through, translating lessons learned into durable architectural, control, and guardrail improvements that prevent recurrence
• AI Implementation Security
• Own the secure adoption of AI-enabled development and security capabilities, establishing patterns and guardrails for secure code review, automated assessments, and process improvements throughout the SDLC.
• Provide principal-level architecture and risk guidance for AI implementations and integrations, shaping secure design decisions, control expectations, and review practices for emerging use cases.
• Drive governance and technical controls to define, monitor, and enforce data boundaries, permissions, and approved usage patterns for AI-related data access.
• The ideal candidate has

Responsibilities

• will be:
• Application & API Security
• Define, mature, and drive adoption of application and API security standards, including authentication and authorization patterns, input validation

Skills

Certifications

Degrees

Work schedule

Industry

Company size

Security clearance