Application Security Engineer

As an Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program.

What Youll Do:
Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications.
Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices.
Develop and deliver security training to development teams on secure coding techniques and common vulnerabilities.
Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis.
Integrate security testing tools and processes into the CI/CD pipeline.
Contribute to the development and maintenance of application security policies, standards, and procedures.
Research and evaluate new application security tools and technologies.
Monitor application security metrics and provide regular reports on the security posture of applications.
Participate in incident response activities related to application security.
Champion a security-first culture within the engineering organization.