Sr. Application Security Engineer

When you work with the world's most innovative companies, you know you're making a difference.

Our clients are the game changers, leaders and investors who fuel the global innovation economy. They're the businesses behind the next medical breakthroughs. And the visionaries whose new technologies could transform the way people live and work.

They come to SVB for our expertise, deep network and nearly forty years of experience in the industries we serve, and to partner with diverse teams of passionate, enterprising SVBers, dedicated to an inclusive approach to helping them grow and succeed at every stage of their business.

Join us at SVB and be part of bringing our clients' world-changing ideas to life. At SVB, we have the opportunity to grow and collectively make an impact by supporting the innovative clients and communities SVB serves. We pride ourselves in having both a diverse client roster and an equally diverse and inclusive organization. And we work diligently to encourage all with different ways of thinking, different ways of working, and especially those traditionally underrepresented in technology and financial services, to apply.

Are you excited about security and software development? Are you proficient in broad and deep application security skills and do you enjoy working in a fast-paced environment? Join us at Silicon Valley Bank for an exciting and challenging role. In this role, you will join SVB's Application Security team and help ensure our products and services are built securely from the ground up by performing core application security practices like threat modeling, secure code reviews, security testing and so on.

Responsibilities

• Act as liaison between Security and software development teams
• Assist development teams implementing secure SDLC practices
• Threat model applications and work with development team throughout the SDLC
• Perform application vulnerability assessments and penetration tests
• Provide security and compliance requirements for software development projects

• BS in Computer science or equivalent experience
• 3+ years in a application security engineering role
• Experience in web application security testing (assessment/penetration testing)
• Experience configuring and using SCA, SAST, IAST, DAST, and other application security tools
• Experience performing manual code reviews and threat modeling
• Experience supporting agile and waterfall projects
• Strong analytical skills and ability to quickly learn new skills
• Good verbal and written communication skills
• Familiarity with OWASP guidelines
• Knowledge of agile and secure SDLC Additional

• One or more Certifications (CISSP, GWEB, GWAPT, OSWE, OSWA, CEH)
• Strong software development or scripting experience (Python, Shell, Java, json, Scrum, Jira, etc)
• Familiarity with network and application protocols (Http, Https, TCP/IP, SAML 2.0, OAuth 2.0, Rest APIs, etc)
• Knowledge or experience implementing SDLC frameworks like OpenSAMM or BSIMM
• Database knowledge

2021 SVB Financial Group. All rights reserved. SVB, SVB FINANCIAL GROUP, SILICON VALLEY BANK, MAKE NEXT HAPPEN NOW and the chevron device are trademarks of SVB Financial Group, used under license. Silicon Valley Bank is a member of the FDIC and the Federal Reserve System. Silicon Valley Bank is the California bank subsidiary of SVB Financial Group (Nasdaq: ).

Equal Employment Opportunity

Silicon Valley Bank is an equal opportunity employer and is dedicated to expanding its commitments and investments to create a more diverse, equitable and inclusive company culture and innovation ecosystem. We are strongly committed to the values and policy of equal employment opportunity across our employment practices.

Silicon Valley Bank is registered in England and Wales at Alphabeta, 14-18 Finsbury Square, London EC2A 1BR, UK under No. FC029579. Silicon Valley Bank is authorised and regulated by the California Department of Business Oversight and the United States Federal Reserve Bank; authorised by the Prudential Regulation Authority with number 577295; and subject to regulation by the Financial Conduct Authority and limited regulation by the Prudential Regulation Authority. Details about the extent of our regulation by the Prudential Regulation Authority are available from us on request.