The Application Security Engineer will play a key role within the Application Security team, providing hands-on technical expertise, guidance, and enablement to development teams across Featurespace. This position is responsible for enhancing application security by assessing vulnerabilities, promoting secure development methods, offering guidance on remediation, and making sure Visa鈥檚 security standards and requirements are met.
This position requires strong technical capability, excellent communication skills, and the ability to work collaboratively across engineering, product, and security stakeholders.
Core Responsibilities:
Application Security & Vulnerability Support:
- Review and triage findings from application security tooling, including SAST, DAST, SCA, and container scanning solutions.
- Provide technical guidance to development teams to support remediation of vulnerabilities and improve security posture.
- Conduct or support penetration testing and targeted security assessments where appropriate.
- Review and escalate critical application security risks to the appropriate technical and business stakeholders.
Secure Development & Engineering Partnership:
- Support engineering teams in understanding and meeting Visa security standards and requirements.
- Provide coaching, best practices, and security knowledge sharing to promote secure development across the organization.
- Deliver training sessions for technical and non鈥憈echnical groups on application security topics and processes.
Process & Governance:
- Contribute to continuous improvement of application security processes, tooling, and standards.
- Support exception management, including reviewing risk acceptance submissions and documenting decisions.
- Assist with compliance and evidencing requirements related to application security activities.
Collaboration & Communication:
- Because this role involves close collaboration with other teams and hands鈥憃n work within the Application Security team, you will be expected to demonstrate practical coding skills.
- Partner closely with development, DevOps, infrastructure, and product stakeholders to drive secure design and remediation outcomes.
- Share expertise and mentor other members of the Application Security team.
- Participate in relevant cross-functional forums (e.g., BCWG) where application security topics arise.
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.