Application Security Solutions Engineer

OH0713 NW Bancshares HQ **Job Description** The Application Security Solutions Engineer is responsible for supporting the security of the Bank's internally developed, acquired, and third-party applications. This role focuses on application security testing, vulnerability remediation tracking, application penetration testing facilitation, and securing AI-enabled applications. The Application Security Engineer works closely with application development, DevOps, risk management, and information security teams.   **Essential Functions** •    Perform and support SAST, DAST, and SCA testing •    Review, validate, and track remediation of findings •    Perform penetration testing against applications - Oversee remediation and metric reporting •    Coordinate internal and third-party penetration tests - Review results and participate in remediation plan development •    Mentor developers in the area of secure coding practices •    Embed security controls throughout the SDLC •    Provide secure coding guidance and threat modeling support •    Assist in securing AI-enabled applications •    Review architectures for data and model risks •    Support audits and regulatory requirements •    Maintain application security standards   **Additional Essential Functions** •    Ensure compliance with Northwest’s policies and procedures, and Federal/State regulations •    Navigate Microsoft Office Software, computer applications, and software specific to the department in order to maximize technology tools and gain efficiency •    Work as part of a team •    Work with on-site equipment   **QUALIFICATIONS** To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.   **Education** High School Diploma     **Work Experience** 5 - 6 years    Application security experience              5 - 6 years    Financial services experience              5 - 6 years    Penetration testing exposure                **Licenses and Certifications**     CSSLP, GWAPT, OSCP    Upon Hire                  Comp TIA Sec+ or CISSP    Upon Hire                Northwest is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.