Application Security Engineer I

Bloomberg Industry Group is seeking an Application Security Engineer I to join their Application Security team. In this role, you will support application security through testing, vulnerability management, and secure design collaboration, while working closely with developers to integrate security into CI/CD pipelines.

What you'll do:

• Participate in application security practices such as:
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Penetration Testing
• Participate in vulnerability management processes
• Assist in the development, deployment and automation of security tools, scripts, and processes
• Collaborate with software engineers to design, implement, and review security features in applications
• Support the identification and resolution of security incidents as part of the incident response team
• Stay current on emerging security trends, vulnerabilities, and tooling to continuously elevate Application Security

What they're looking for:

• Basic knowledge of security principles, standards, and best practices
• Familiarity with one or more programming languages (e.g., Python, Java, JavaScript)
• Ambition to learn and grow into AI Security and Security Engineering
• Exposure to security testing tools like SAST, DAST, SCA, and/or vulnerability management platforms
• An associate's degree in Information Security, Computer Science, or a related field, or equivalent experience
• 1-2 years of relevant experience
• Certifications such as CompTIA Security+, CompTIA Pentest+, Certified DevSecOps Professional (CDP) or equivalent
• Hands-on experience with CI/CD pipelines (GitLab, GitHub Actions, Jenkins)
• Cloud environments (AWS)
• Secure coding or code review
• Security automation or scripting
• Participation in security communities, Capture The Flag (CTF) events, open-source contributions, or similar skill-building activities