Application Security Engineer H/F - 75

CAPITAL FUND MANAGEMENT S. A.ABOUT THE ROLE

Are you passionate about application security and ready to serve as a subject matter expert in both application security andsecuring thesoftwaredevelopmentlifecycle? In this role,you'llbe instrumental in protecting our low-latency processing systems and trading platforms across diverse environments. Reporting directly to theDirector of Application Security, you will work collaboratively with development, infrastructure, and operations teams to embed security into every phase of ourprocess and in the company culture.

Overview & Key Responsibilities:

- Serve as the internal point of reference and Subject Matter Expert on application security and software factory security.

- Design, implement, andmaintainthe essential tools to ensure secure CI/CD pipelines with robust security controls including automated testing,secretsdetection,compliance checks, software composition analysis, and vulnerability management.

- Supportour development teamsin addressing identifiedfindings, ensuringcompliance withsecure coding practicesto align withindustry standardsforboth cloud and on-premisesenvironments, andpromotea culture ofongoingsecurityenhancement.

- Participate indesign reviews, threat modeling, and architecture assessments to proactivelyidentifyand mitigate security risks in new and existing solutions.

- Work with our Core and Architecture team toestablishand enforcesolutionsfor encryption, authentication (both human and machine), access control (role- and attribute-based), secret management, and secure configurations in cloud (AWS, GCP, or Azure) as well as on-premises environments.

- Develop, monitor, and report indicators to track security performance and drive continuous improvement.