Applications Security Solutions Engineer

Application Security Engineer (Contract-to-Hire, Hybrid)

Our client, a leading financial institution, is seeking an experienced Application Security Engineer for a 6-month contract-to-hire opportunity in the Columbus, OH market. This role follows a hybrid schedule with four days onsite and one day remote each week. The ideal candidate will play a key role in securing internally developed, acquired, and third-party applications while partnering closely with development, DevOps, risk management, and information security teams.

Key Responsibilities - Perform and support application security testing, including SAST, DAST, and SCA.

• Review, validate, and track remediation of identified vulnerabilities.
• Conduct and support application penetration testing, including oversight of remediation efforts and reporting of metrics.
• Coordinate internal and third-party penetration tests; review findings and contribute to remediation planning.
• Mentor development teams on secure coding practices and embed security throughout the SDLC.
• Provide threat modeling support and secure design guidance.
• Assist in securing AI-enabled applications, including evaluating data and model risks.
• Review application architectures for security vulnerabilities and compliance risks.
• Support audits and ensure adherence to regulatory requirements.
• Maintain and enhance application security standards and best practices.

Additional Responsibilities - Ensure compliance with organizational policies, procedures, and federal/state regulations.

• Utilize Microsoft Office and relevant tools to improve workflow efficiency.
• Collaborate effectively within a team environment.
• Work with on-site systems and equipment as required.

Qualifications - High School Diploma or equivalent required.

• 5–6 years of experience in application security.
• 5–6 years of experience within the financial services industry.
• 5–6 years of hands-on or supporting experience with penetration testing.

Certifications - CSSLP, GWAPT, or OSCP (required upon hire).

• CompTIA Security+ or CISSP (required upon hire).

Additional Requirements - This role is not open to C2C, third-party vendors, visa sponsorship, or student EAD candidates.