Sr Application Security Engineer

$130,200 - $214,800/Yr

Travelers - Hartford, CT

Full-time - Mid Level

Hartford, CT

Insurance Carriers and Related Activities

About the position

Travelers is seeking a Senior Application Security Engineer to enhance our Technology landscape. This role involves advanced security engineering tasks, including application security testing, vulnerability interpretation, and consulting on secure coding techniques. The individual will collaborate with engineering and architecture teams to establish security patterns and manage resources effectively, acting as a subject matter expert across various applications and systems.

Responsibilities

• Support and own the development of an API Security strategy for secure development of GraphQL, REST, gRPC, and SOAP based services.
• Support the validation of API Security requirements through an API Security testing framework.
• Evangelize API secure design principles to the engineering community.
• Support Secure SDLC by building partnerships with the engineering community.
• Perform complex security engineering analysis and develop functions for impactful tasks.
• Lead the implementation of solutions to moderately complex problems aligned with team goals.
• Act as a technology advocate, seeking opportunities to improve the business through technology.
• Provide technical guidance and mentorship while fostering a team environment.
• Apply knowledge of current industry trends to formulate solutions within assigned efforts.

Requirements

• Bachelor's degree in Computer Science or a related field.
• Five years of application security and/or API development experience.
• Direct hands-on experience developing and securing APIs.
• Strong experience with development in AWS.
• Strong understanding of API identity and access management controls (e.g., OAuth 2.0, OIDC, JWT).
• Strong experience with service-oriented architectures and secure SDLC practices.
• Strong experience with integrating and managing tools involving SAST, SCA, and Secrets scanning capabilities.
• Moderate knowledge of CI/CD pipeline technologies such as GitHub Actions, Jenkins, and/or GitLab CI/CD.

Nice-to-haves

• Advanced delivery skills including software design strategy and methodology determination.
• Demonstrated track record of domain expertise and business partnership development.
• Strong problem-solving skills utilizing data and proofs of concepts.
• Strong communication skills to describe technology concepts clearly.
• Advanced leadership skills to inspire and motivate others.

Benefits

• Health Insurance coverage from the first day of employment for employees and eligible family members.
• 401(k) matching contributions dollar-for-dollar up to the first 5% of eligible pay.
• Pension Plan that is 100% funded by Travelers.
• Minimum of 20 days Paid Time Off annually, plus nine paid company Holidays.
• Access to a wellness program with tools, discounts, and resources for wellness goals.
• Mental health program providing access to free professional counseling services and health coaching.
• Matching Gift and Volunteer Rewards program to encourage community involvement.