Application Security Engineer II

$107,500 - $177,400/Yr

020 Travelers Indemnity Co - Hartford, CT

Full-time - Mid Level

Hartford, CT

10,001+ employees

About the position

Travelers is seeking an Application Security Engineer II to enhance its Technology landscape. This role involves advanced security engineering tasks, including application security testing, vulnerability assessment, and providing guidance on secure coding practices. The engineer will work closely with various teams to ensure the security of applications and contribute to the development of security frameworks.

Responsibilities

• Contribute to the creation of an application penetration testing framework.
• Conduct thorough penetration testing on web, mobile, and cloud-based applications to identify security vulnerabilities.
• Develop and execute test plans, scripts, and methodologies for application security assessments.
• Document and report findings, including detailed descriptions of vulnerabilities, potential impact, and recommended remediation steps.
• Perform security research, application security testing, interpretation of vulnerability scan results, threat modeling code reviews, and advise on defensive coding techniques.
• Work independently to tackle well-scoped and loosely scoped problems.
• Seek opportunities to expand technical knowledge and capabilities.
• Provide technical guidance and mentorship to less experienced employees.

Requirements

• Bachelor's degree plus four years of application security experience and/or certifications such as OSCP, OSWA, or GWAPT.
• Proficiency using penetration testing tools such as Burp Suite.
• Strong knowledge of common application vulnerabilities (e.g., OWASP Top Ten).
• Experience reviewing reported application vulnerabilities from outside testers and researchers for impact and likelihood.
• Experience with DAST tooling and supporting a scalable and integrated strategy to test applications.
• Familiarity with threat modeling methodologies.

Nice-to-haves

• Intermediate delivery skills including the ability to estimate accurate timelines for tasks.
• Demonstrated track record of domain expertise including understanding technical concepts necessary to do the job effectively.
• Strong problem solver who ensures solutions are built for the long term.
• Strong communicator who possesses the ability to articulate information clearly and concisely.

Benefits

• Health Insurance coverage from the first day of employment for employees and their eligible family members.
• 401(k) matching contributions dollar-for-dollar up to the first 5% of eligible pay.
• Pension Plan that is 100% funded by Travelers.
• Minimum of 20 days Paid Time Off annually, plus nine paid company Holidays.
• Access to a wellness program that includes mental health resources and professional counseling services.
• Volunteer Rewards program that enables employees to give back to the charity of their choice.