Application Security Engineer

1 week ago

Walnut Creek, CA, United States Mechanics Bank Full time
Mechanics Bank is currently searching for an Application Security Engineer to join our team. Here at Mechanics Bank, we value connection, partnership, long term relationships and working together in person. This role can work remote within the US.

Under limited direction, the Application Security Engineer is responsible for securing the bank's network and external-facing applications through continuous penetration testing, application code review, threat hunting, web application firewall management, and vulnerability scanning. This role requires effective communication of remediation requirements to both technical and business leaders. Additionally, the engineer takes a leading role in DevSecOps process discussions and planning.

What you will do:
  • Defines security requirements for the implementation of new applications and projects: Serves as a security engineer/consultant on projects, works closely with the application development team to ensure coding follows security best practices, provides security guidance during the design and implementation phases to ensure robust security controls are integrated from the start.
  • Performs continuous penetration testing: Effectively documents and reports findings, illustrating risks and requirements for resolution. Recommends and implements improvements based on testing outcomes.
  • Leads security research on threats and remediation techniques and technology: Makes informed recommendations to Information Security and Information Technology teams, oversees the implementation of recommended security measures.
  • Conducts security event analysis and intrusion detection (IDS/IPS): Leads incident response efforts, including triage, incident analysis/forensics, and remediation. Develops and refines incident response processes and playbooks.
  • Serves on the Incident Response Team: Focuses on Computer Incident Response, coordinates with various teams to ensure a cohesive and effective incident response.
  • Supports the Bank's operational information security responsibilities, including the development and maintenance of standards, procedures, and guidelines necessary to satisfy the Information Security department's network operations.
  • Manages and enhances the bank's network vulnerability management program: Regularly assesses and updates vulnerability management practices to ensure they meet current security standards and address emerging threats.
  • Assists in conducting risk assessments to evaluate the effectiveness of existing controls and determine the impact of proposed changes to business processes, applications and systems.
  • Provides technical support to regulatory agencies, external auditors, and internal auditors, as required, to respond to audits and examinations of the Bank's control environment
Who you are:
  • Preferred: Bachelor's Degree in a related field, or equivalent education, certifications, and experience
  • Required: 3 - 5 years' experience in application security, penetration testing, or a comparable role
  • Required: Understanding of one or more of the following programming languages: C#, Angular JavaScript, T-SQL
  • Preferred: Industry Standard Certifications, such as: CompTIA CASP+; GIAC, EC-Council, (ISC)2, OSCP, CompTIA Linux+; ISC2 CISSP, CompTIA Network+
  • Understanding of one or more scripting languages.
  • Understanding of Linux, Windows, and Mac OS.
  • Passion for automation and scripting (Python, Perl, Bash, PowerShell, etc.).
  • Strong technical skills with Microsoft Office; must have the ability to effectively communicate and write reports understandable to both business and technical staff.
  • Threat analysis / Incident Response: interpreting events and analyzing network traffic.
  • Mitigating and addressing threat vectors including XSS, broken authentication, SQL injections, SSRF, misconfigurations, insecure designs.
  • Application vulnerabilities/penetration testing/remediation.
  • Knowledge of current and upcoming IT security technologies.
  • Awareness of the latest and common security threats (OWASP Top 10, OWASP for API).
  • Excellent ability to diagnose and troubleshoot accessibility issues.
  • Skill in oral and written communication, including presentations to senior management.
  • Ability to influence and work with employees at all levels of the organization
#LI-HJ1

Pay Range: $130,000 - $170,000 annually

AIP/Bonus : Up to 15%

Our comprehensive employee benefits program is designed for you to live your best life at work, home, and everywhere in between. Employees working 25 hours or more per week are eligible for health benefits effective the first day of the month following or coinciding with their date of hire.
Benefits package includes[1]:
  • Medical, prescription, dental, and vision coverage for employees and their eligible family members
  • Employer paid Employee Assistance Program, Life Insurance, AD&D, and Disability benefits
  • Health Savings Account with employer contribution
  • Healthcare and Dependent Care Flexible Spending Accounts and Commuter/Parking Benefit
  • 401(k) and Roth 401(k) with company contribution
  • 529 Education Savings plan, Tuition Reimbursement Program and Student Loan Assistance Program
  • Supplemental Health plans, Voluntary Legal and Identity Theft Services
  • 11 paid holidays, paid Sick days (accrual of one hour for every 30 hours worked), up to 25 paid vacation days, and 16 hours of paid volunteer time throughout the calendar year
  • Free personal checking and savings account; Discounted rates on primary residence loan with $0 origination fees (restrictions apply)
Final compensation package will be determined by the work experience, education, and/or skill level of the applicant along with internal equity and alignment with geographic market data.
  • Mechanics Bank is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, religion, national origin, age, genetic information, veteran status, or on the basis of disability, gender identity, sexual orientation or other bases prohibited by applicable law.
  • Please view Equal Employment Opportunity Posters provided by OFCCP here.
  • To learn more about Mechanics Bank's California privacy and security policies, including your right to a Notice At Collection as a California Resident, please visit

    California Privacy Policy for Prospective Employees | Mechanics Bank


[1] The benefits listed in this job posting reflect the Bank's most reasonable and genuinely expected benefits offered for this position.

  • Supervisor of Business Applications

    3 days ago

    Walnut Creek, CA, United States Berkshire Hathaway Homestate Companies Full time

    Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an immediate need for a Supervisor in our IT Business Applications team to oversee a team of application analysts and specialists, ensuring business applications are running efficiently and effectively to meet organizational goals. This individual will focus on application management,...

  • Supervisor of Business Applications

    5 hours ago

    Walnut Creek, CA, United States Berkshire Hathaway Homestate Companies Full time

    Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an immediate need for a Supervisor in our IT Business Applications team to oversee a team of application analysts and specialists, ensuring business applications are running efficiently and effectively to meet organizational goals. This individual will focus on application management,...

  • Engineer III

    3 days ago

    Walnut Creek, CA, United States Qualus Full time

    Position Overview Power your future with Qualus as a Civil Structural Engineer. In this role, the candidate will design and detail mat and pier type foundations for substation structures. Additionally, the candidate will design substation structures ranging from simple equipment supports to overhead line towers. All work will be performed with emphasis on...

  • Engineer III

    21 hours ago

    Walnut Creek, CA, United States Qualus Full time

    Position Overview Power your future with Qualus as a Civil Structural Engineer. In this role, the candidate will design and detail mat and pier type foundations for substation structures. Additionally, the candidate will design substation structures ranging from simple equipment supports to overhead line towers. All work will be performed with emphasis on...

  • Software Engineer 2

    3 days ago

    Walnut Creek, CA, United States Berkshire Hathaway Homestate Companies Full time

    Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an opening for a Software Engineer 2. This individual will need extensive technical expertise to join our dynamic development team. Responsibilities include designing, developing, and maintaining software solutions in a hybrid development environment, encompassing on-premises, cloud,...

  • Software Engineer 2

    5 days ago

    Walnut Creek, CA, United States Berkshire Hathaway Homestate Companies Full time

    Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an opening for a Software Engineer 2. This individual will need extensive technical expertise to join our dynamic development team. Responsibilities include designing, developing, and maintaining software solutions in a hybrid development environment, encompassing on-premises, cloud,...

  • Software Engineer 2

    2 weeks ago

    Walnut Creek, CA, United States Berkshire Hathaway Homestate Companies Full time

    Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an opening for a Software Engineer 2. This individual will need extensive technical expertise to join our dynamic development team. Responsibilities include designing, developing, and maintaining software solutions in a hybrid development environment, encompassing on-premises, cloud,...

  • Senior DevOps Engineer

    3 days ago

    Walnut Creek, CA, United States IT Solutions LLC Full time

    Senior DevOps Engineer (Only on W2) Walnut Creek, CA OR Reno, NV FTE OnlyPOSITION SUMMARY We're seeking a Senior DevOps Engineer to lead key initiatives within our rapidly growing engineering organization. The ideal candidate will have deep, hands-on experience with Microsoft Azure and the broader Microsoft technology stack, and a strong track record in...

  • Senior DevOps Engineer

    3 days ago

    Walnut Creek, CA, United States IT Solutions LLC Full time

    Senior DevOps Engineer (Only on W2) Walnut Creek, CA OR Reno, NV FTE OnlyPOSITION SUMMARY We're seeking a Senior DevOps Engineer to lead key initiatives within our rapidly growing engineering organization. The ideal candidate will have deep, hands-on experience with Microsoft Azure and the broader Microsoft technology stack, and a strong track record in...

  • Senior Maritime Infrastructure Engineer

    7 days ago

    Walnut Creek, CA, United States Insight Global Full time

    About the Role Insight Global is seeking a highly skilled Senior Maritime Infrastructure Engineer to lead the design, deployment, and modernization of IT infrastructure across vessels, ports, and shipboard environments for a leading navigation technology company. This is a hands-on, high-impact role ideal for a technologist with deep maritime IT experience...