Talent.com
Specialist, Application Security
Specialist, Application SecurityPrudential Financial • Newark, NJ, USA
Specialist, Application Security

Specialist, Application Security

Prudential Financial • Newark, NJ, USA
30+ days ago
Job type
  • Full-time
Job description

Job Classification :

Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

Your Team & Role

As an Application Security Specialist on the Attack Surface Management Team, you will partner with other security professionals across the Information Security Office, the Chief Technology Office, and other engineering groups in Prudential to advance Prudential’s application security program and drive Prudential’s risk reduction efforts across the global enterprise.

In this role, you would be responsible for efforts to secure modern applications and ensuring “secure by design” development best practices across all digital assets in alignment with industry standards. You will track and govern risk reduction, work with partner organizations to consult on implementation efforts, mature operational processes and enable automation CI / CD controls for enforcement and monitoring. You will work on significant and unique issues where analysis of situations or data requires an evaluation of intangible variables and may impact future concepts, products or technologies to ensure security of our products and customers!

The ideal candidate will have a deep understanding of modern application architecture, cloud-native security, and DevOps practices. Forward-thinking is required for this role to include focus on how to securely develop systems, enable self-service and incorporate capabilities for Security to scale and defend against evolving threats.

Here is What You Can Expect on a Typical Day

  • Serve as the escalation point for operational and project work from junior team members, providing technical support for security tools and solutions, and implementing assessment and response processes.
  • Utilize AppSec tool and process expertise to resolve complex technical and organizational challenges, bridging gaps between AppSec / DevOps and IT / business teams to ensure resource availability for team goals.
  • Collaborate with leadership to define the future direction of the AppSec program, while maintaining a deep understanding of daily operations to offer informed recommendations.
  • Enhance vulnerability and configuration monitoring for open source, third-party, and proprietary code and applications, integrating security best practices into development and operations.
  • Design, develop, and implement security policies and alerting mechanisms based on SOX and NIST standards, and assist in evaluating new software solutions.
  • Conduct qualitative and quantitative analyses to improve user experience, promoting secure-by-design principles throughout the software development lifecycle.
  • Validate mitigation controls, ensure reporting metrics convey risk posture to leadership, and adapt them as necessary.
  • Revise processes, metrics, and documentation to enhance AppSec program capabilities, providing proof-of-concept exploits to demonstrate exploitability and validate remediation actions.
  • Collaborate with technology peers and business stakeholders to ensure remediation efforts comply with corporate standards, creating technical documentation and SoPs for internal security processes.
  • Work with engineering teams to address application vulnerabilities, developing remediation and mitigation strategies, and define requirements for automation tools to manage application security posture.

The Skills & Expertise You Bring

  • Bachelor of Computer Science or Engineering or experience in related fields
  • Ability to coach others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
  • Experience with agile development methodologies and Test-Driven Development (TDD)
  • Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business
  • Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
  • Excellent problem solving, communication and collaboration skills
  • Applied experience with several of the following :

  • Familiarity with vulnerability and security scanning tools, as well as common vulnerability data sources and frameworks (CVE, CVSS, EPSS, CWE)
  • Experience improving vulnerability management platforms, processes, and assessments
  • Engineering mindset – systems thinking, creative problem solving, deductive reasoning
  • SAST, SCA, DAST, ASPM tools
  • Strong understanding of software composition analysis and SBOMs.
  • Ability to adjust communicate style to the target audience with a proficiency in communicating technical and business risk
  • Experience with common vulnerability feeds from government, vendor, and open-source communities
  • Understanding of threat actors with the ability to articulate how they operate and demonstrate how they subvert common security controls
  • Understanding of the OWASP Top 10. Familiarity with vulnerabilities in 3rd party libraries and remediation
  • Preferred qualifications :

  • Scripting background (Python, PowerShell, Bash, etc.)
  • Understanding of threat actors, with the ability to articulate or demonstrate how they operate and subvert common security controls
  • Knowledge of industry security standards and frameworks (CIS, NIST, PCI DSS)
  • Ability to perform exploit validation and web application penetration testing
  • Agentic AI for Security use cases
  • Leverage diverse ideas, experiences, thoughts, and perspectives to the benefit of the organization
  • GIAC Web Application Penetration Tester (GWAPT)
  • CompTIA Advanced Security Practitioner (CASP+)
  • GIAC Cloud Security Automation (GCSA)
  • IT Security certification beyond intro level certifications, (e.g., GCFA, GCIA, GNFA, GCTI, GREM, GCIH, GCFA, GPEN, OSCP, etc.).
  • Cloud (AWS, Azure, GCP, etc.) Certs
  • Other Security Certifications beyond intro level
  • What we offer you :

    Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $99,700.00 to $148,500.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.

    Market competitive base salaries, with a yearly bonus potential at every level .

    Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave .

    401(k) plan with company match (up to 4%).

    Company-funded pension plan.

    Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.

    Work / Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.

    Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.

    Employee Stock Purchase Plan : Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service.

    Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance.

    Create a job alert for this search

    Application Specialist • Newark, NJ, USA

    Similar jobs
    Security Operations Center Analyst

    Security Operations Center Analyst

    TechBiz Global GmbH • Newark, NJ, US
    Full-time
    At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio.Security Operations Center Analyst. If you're looking for an exciting opportunity to grow in a innovativ...Show more
    Last updated: 30+ days ago
    General Manager(03628) - 103 Fulton St.

    General Manager(03628) - 103 Fulton St.

    Domino's • Village of Farmingdale, NY, United States
    Full-time
    Referrals increase your chances of interviewing at Domino’s.Works well under stress of high paced environment.Possess the ability to train and develop a team. Industries : Software Development and IT...Show more
    Last updated: 4 days ago • Promoted
    Technical Engineering Training Specialist

    Technical Engineering Training Specialist

    Robert Half • Parsippany, NJ, US
    Full-time
    The Technical Engineering Training Specialist is responsible for developing and delivering training programs for both internal and external customers across a full product ecosystem (including inst...Show more
    Last updated: 6 days ago • Promoted
    Remote Investment Analyst – AI Trainer ($50-$60 / hour)

    Remote Investment Analyst – AI Trainer ($50-$60 / hour)

    Data Annotation • Sayreville, New Jersey
    Remote
    Full-time +1
    We are looking for a finance professional to join our team to train AI models.You will measure the progress of these AI chatbots, evaluate their logic, and solve problems to improve the quality of ...Show more
    Last updated: 30+ days ago • Promoted
    Safety Specialist

    Safety Specialist

    The Spear Group • Linden, NJ, US
    Full-time
    The Spear Group Full-Time Opportunity with Corporate Benefits.Construction Safety Field Representative - (Pharma Manufacturing Capital Projects. Owner’s Side Construction Safety Professional)....Show more
    Last updated: 1 day ago • Promoted
    Senior Appliance Service Technician

    Senior Appliance Service Technician

    Dan Marc Factory Service • Caldwell, NJ, US
    Full-time
    Growth and Career Advancement Opportunities.Dan Marc Appliance, a Whirlpool Factory Service is looking for talented.Senior Appliance Service Technicians. In the Morris / Essex County market and Bergen...Show more
    Last updated: 30+ days ago • Promoted
    Senior Application Security Consultant

    Senior Application Security Consultant

    VirtualVocations • Elizabeth, New Jersey, United States
    Full-time
    A company is looking for a Senior Consultant, Application Security.Key Responsibilities Lead and support penetration testing on applications with complex technology stacks Contextualize vulnerab...Show more
    Last updated: 3 days ago • Promoted
    VP Information Security Automation Strategy

    VP Information Security Automation Strategy

    Prudential Annuities Distributors (PAD) • Newark, NJ, United States
    Full-time
    A leading financial services provider is seeking a Vice President, Information Security - Automation Strategy, to set the direction for automation across Information Security.The successful candida...Show more
    Last updated: 6 days ago • Promoted
    TECHNICAL APPLICATIONS TRAINING SPECIALIST

    TECHNICAL APPLICATIONS TRAINING SPECIALIST

    Larry Radzely • East Hanover, NJ, US
    Full-time
    Quick Apply
    Technical Applications Training Specialist.Internal and External customers for the company's line of products (instruments, reagents and digital products), providing the customer the highest level ...Show more
    Last updated: 30+ days ago • Promoted
    Travel Nuclear Medicine Tech - $3,077 per week in New Brunswick, NJ

    Travel Nuclear Medicine Tech - $3,077 per week in New Brunswick, NJ

    AlliedTravelCareers • New Brunswick, NJ, US
    Full-time +1
    This is a travel Nuclear Medicine Technologist assignment in New Brunswick, NJ, working days.At Epic Travel Staffing, you’ll never second-guess your value. With competitive salary and a wide range o...Show more
    Last updated: 18 hours ago • Promoted • New!
    Application Security / AI-ML SAST Engineer

    Application Security / AI-ML SAST Engineer

    Re Focus LLC • Iselin, NJ, United States
    Full-time
    Quick Apply
    Required Experience : • 4+ years Application Security (SAST, OWASP Top 10) &...Show more
    Last updated: 17 hours ago • New!
    Special Agent, $40,000 Recruitment Incentive

    Special Agent, $40,000 Recruitment Incentive

    The United States Secret Service • Union, NJ, US
    Full-time
    Recruitment Incentive : Applicants may be eligible for a $40,000 recruitment incentive in accordance with regulatory requirements. Click apply for complete details on the recruitment incentive detail...Show more
    Last updated: 3 days ago • Promoted
    General Application

    General Application

    Color Street and Innovative Cosmetic Concepts • Paterson, NJ, US
    Full-time
    Express Yourself in Full Color.Our revolutionary, patented real nail polish strips have redefined beauty and self-expression — empowering individuals everywhere to shine in full color.We&rsqu...Show more
    Last updated: 30+ days ago • Promoted
    Senior Software Engineer, Core Experiences - Paterson, USA

    Senior Software Engineer, Core Experiences - Paterson, USA

    Speechify • Paterson, New Jersey, United States
    Full-time
    Speechify is the easiest way to listen to the world’s information.Articles on the web, documents in the cloud, books on your phone. We absorb it all and let you listen to it at your desk, on the go,...Show more
    Last updated: 6 days ago • Promoted
    Credentialing Specialists

    Credentialing Specialists

    Armada • Springfield, NJ, United States
    Full-time
    YES, nationwide to support onsite credentialing operations as mission needs require.CONTINGENT UPON AWARDING OF GOVERNMENT CONTRACT • • • • • • • •. Credentialing Specialists will provide credentialing serv...Show more
    Last updated: 30+ days ago • Promoted
    Anaplan Technical Lead

    Anaplan Technical Lead

    Quantum Integrators • New Brunswick, NJ, US
    Full-time
    Hybrid – Work from the customer office in New Brunswick.Required Experience & Qualifications.Anaplan model building with proven. Opex / Capex), Sales & Operations Planning, Demand / Supply...Show more
    Last updated: 3 days ago • Promoted
    Digital Pathology Application Specialist

    Digital Pathology Application Specialist

    Hamamatsu Corporation • Middlesex, NJ, US
    Full-time
    Quick Apply
    Hamamatsu, one of the world’s largest suppliers of advanced light detectors and detector systems for industrial, scientific, and commercial applications, has an immediate opening for a Digita...Show more
    Last updated: 30+ days ago
    Manufacturing Services & Infrastructure Manager

    Manufacturing Services & Infrastructure Manager

    Saint-Gobain North America • Wayne, NJ, US
    Full-time
    Saint-Gobain’s innovations touch almost every major industry around the world, moving us forward, making meaningful connections, and inspiring us to go beyond the impossible.Within Mobility, ...Show more
    Last updated: 4 days ago • Promoted