Application Security Engineer I

Bloomberg Industry Group is seeking an Application Security Engineer I to join their Application Security team. This role involves supporting application security through various practices, collaborating with developers, and ensuring the security of applications.

What you'll do:

• Participate in application security practices such as:
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Penetration Testing
• Participate in vulnerability management processes
• Assist in the development, deployment and automation of security tools, scripts, and processes
• Collaborate with software engineers to design, implement, and review security features in applications
• Support the identification and resolution of security incidents as part of the incident response team
• Stay current on emerging security trends, vulnerabilities, and tooling to continuously elevate Application Security

What they're looking for:

• Basic knowledge of security principles, standards, and best practices
• Familiarity with one or more programming languages (e.g., Python, Java, JavaScript)
• Ambition to learn and grow into AI Security and Security Engineering
• Exposure to security testing tools like SAST, DAST, SCA, and/or vulnerability management platforms
• An associate's degree in Information Security, Computer Science, or a related field, or equivalent experience
• 1-2 years of relevant experience
• Certifications such as CompTIA Security+, CompTIA Pentest+, Certified DevSecOps Professional (CDP) or equivalent
• Hands-on experience with CI/CD pipelines (GitLab, GitHub Actions, Jenkins)
• Cloud environments (AWS)
• Secure coding or code review
• Security automation or scripting
• Participation in security communities, Capture The Flag (CTF) events, open-source contributions, or similar skill-building activities