Application Security Engineer

Posted Yesterday
Be an Early Applicant
Springfield, MA
Hybrid
110K-145K Annually
Senior level
Big Data • Fintech • Information Technology • Insurance • Financial Services
We help people secure their future and protect the ones they love.
The Role
The Application Security Engineer will assess application security, identify vulnerabilities, implement security solutions, and collaborate with teams to ensure secure development practices.
Summary Generated by Built In

The Opportunity
We are seeking an experienced Application Security Engineer with a passion for solving problems and being innovative to join our Application Security team and take charge of ensuring the confidentiality, integrity, and availability of our applications. The ideal candidate will have advanced knowledge of secure software development, extensive experience with identifying vulnerabilities, and the ability to implement robust security solutions. This role will require technical expertise in secure software development lifecycle (SSDLC), collaboration with development teams, security architects, and other stakeholders to integrate security best practices into all stages of the software development lifecycle.
The Team
Our Software Security team is dedicated to ensuring the security of MassMutual applications through rigorous assessments and proactive measures. While we collaborate closely with security architects, DevOps engineers, and software developers, our core team focuses on securing applications by identifying, risk assessing, prioritizing, reporting, remediation guidance, and continuously monitoring applications for vulnerabilities, implementing security best practices, and assisting teams in remediating vulnerabilities. Our team brings various backgrounds and experiences spanning from software engineering to red teaming, valuing continuous learning, innovation, and collaboration.
The Impact:
Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents.

  • Conduct in-depth security assessments, including vulnerability scanning, and code reviews.
  • Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose remediation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches.
  • Collaborate with security architects to design secure application architectures that align with industry best practices.
  • Ensure secure coding practices are followed, and security controls are incorporated into software designs.
  • Conduct detailed threat modeling to identify attack vectors and potential weaknesses.
  • Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process.
  • Partner with DevOps teams to implement security within CI/CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code.
  • Actively participate in incident response activities related to application security breaches, providing rapid identification and mitigation guidance.
  • Ensure compliance with security regulations, frameworks, and industry standards such as OWASP.
  • Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects to MassMutual's cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making.
  • Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies.
  • Strong problem-solving abilities and analytical thinking.
  • Excellent communication skills to explain security issues to both technical and non-technical stakeholders.
  • A team player with the ability to work in a collaborative, fast-paced environment.


The Minimum Qualifications

  • Bachelor's degree (master's degree preferred) in computer science, Information Security, or a related technical field
  • 5+ years of experience in application security, penetration testing, or secure software development


The Ideal Qualifications

  • Relevant security certifications such as CEH, OSCP, or GWAPT from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc...)
  • Strong knowledge of secure software development methodologies, including threat modeling, code reviews, and static/dynamic analysis.
  • Experience in integrating security into DevOps (DevSecOps) and CI/CD environments.
  • Strong technical knowledge of web application security, infrastructure as code (IaC), container security, and API security.
  • Familiarity with cloud security (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes).
  • Familiarity with SAST, DAST, and IAST tools.
  • Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and their mitigations.
  • Advanced understanding and experience with writing source code (e.g., JavaScript, Java, C/C++/C#, Python, etc.) and familiarity with software security frameworks (e.g., Maven, Node, Gradle, etc.).
  • Experience with identifying security vulnerabilities/defects in dockers, containers, and Kubernetes.
  • Experience with cloud deployment and automation tools (Terraform, GitHub Actions, Jenkins, AWS Cloud Formation Templates, Secrets Managers).
  • Knowledge of compliance and regulatory frameworks (SOC 2, etc.).


#LI-SC1
MassMutual is an Equal Employment Opportunity employer Minority/Female/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply. Note: Veterans are welcome to apply, regardless of their discharge status.
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
Salary Range: $110,400.00-$144,900.00

Top Skills

AWS
Azure
C/C++/C#
Docker
GCP
Github Actions
Java
JavaScript
Jenkins
Kubernetes
Python
Terraform

What the Team is Saying

Alex
Nathalie
Asieh
David
Kymberly
Jasmine
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Springfield, MA
6,000 Employees
Hybrid Workplace
Year Founded: 1851

What We Do

Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. This is why we want to inspire people to Live Mutual. We’re people helping people.

Together, we’re stronger.

Why Work With Us

MassMutual has the financial security and stability of a 170+ year old company, with the culture and energy of a startup. We work every day with the customer front of mind to build the best digital experience in the industry.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

MassMutual Teams

Team
Boston Campus
About our Teams

MassMutual Offices

Hybrid Workspace

Employees engage in a combination of remote and on-site work.

We believe in capitalizing on the best of being together in our offices as well as personal flexibility. Our workplace philosophy puts office collaboration first, combined with flexibility to work remotely.

Typical time on-site: 3 days a week
Company Office Image
HQSpringfield, MA
Company Office Image
Boston, MA
Company Office Image
New York, NY
Learn more

Similar Jobs

MassMutual Logo MassMutual

Information Security Consultant - Application Security Engineer

Big Data • Fintech • Information Technology • Insurance • Financial Services
Hybrid
Springfield, MA, USA
6000 Employees
134K-176K Annually

MassMutual Logo MassMutual

Audiovisual Systems Consultant

Big Data • Fintech • Information Technology • Insurance • Financial Services
Hybrid
Boston, MA, USA
6000 Employees
100K-131K Annually

MassMutual Logo MassMutual

Investment Vendor Oversight Consultant

Big Data • Fintech • Information Technology • Insurance • Financial Services
Hybrid
Boston, MA, USA
6000 Employees
113K-148K Annually

MassMutual Logo MassMutual

Business Information Security Officer

Big Data • Fintech • Information Technology • Insurance • Financial Services
Hybrid
Springfield, MA, USA
6000 Employees
131K-172K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account