D

Devsu

Architecture-driven modernization via living map

Application Security Engineer - Financial/Banking Sector

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeQuito, Ecuador$10k - $30k

About the Job

Requirements

  • A university degree in Systems Engineering, Informatics, or Cybersecurity.
  • Demonstrated experience with the Secure Software Development Life Cycle (SSDLC).
  • Experience validating non-functional security requirements.
  • Experience performing security testing of front-end and back-end applications, APIs and integrations, databases, infrastructure and cloud environments, mobile applications, artificial intelligence/large language models, plugins, and additional components.
  • Experience generating technical and executive reports with remediation recommendations, metrics, and indicators.
  • Experience managing and tracking vulnerabilities.
  • Ability to document structured test cases and validate remediation effectiveness.
  • Experience supporting security incidents and Bug Bounty programs.
  • Eligibility to work in Ecuador.

Responsibilities

  • Execute security tests on applications, including front-end and back-end applications, APIs, databases, integrations, infrastructure, cloud, mobile, artificial intelligence/large language models, plugins, and additional components.
  • Validate compliance with non-functional security requirements defined by Architecture.
  • Support the Secure Software Development Life Cycle (SSDLC).
  • Define and document security test cases before execution, aligned with established standards.
  • Classify vulnerabilities using the CVSS 4.0 methodology.
  • Generate detailed technical reports with findings, evidence, and remediation recommendations.
  • Prepare executive reports and compliance metrics for technical and business stakeholders.
  • Provide prerequisites and support for effective vulnerability management and closure.
  • Track the effectiveness of implemented remediations.
  • Support security incidents, Bug Bounty events, and threat-hunting activities.
  • Review risk matrices with a cybersecurity focus.
  • Include security guidelines in Tribe, Center of Excellence, and strategic project initiatives.
  • Implement monitoring and alert mechanisms to identify deviations or non-compliance.
  • Support continuous improvement, innovation, and operational agility from the application security perspective.
  • Support execution of strategies defined by the Application Security area.

Desired Qualifications

  • Certifications in offensive security or application assurance, such as HTB CWES, HTB CPTS, eWPTX, CSSLP, CPENT, OSCP, OSWE, LPT, CEH Master, or BSCP.
  • Experience using the CVSS 4.0 calculator to classify vulnerabilities.
  • Experience with banking platforms and systems.
  • Technical English proficiency at a minimum level.

About the Company

Devsu

Architecture-driven modernization via living map

Devsu helps enterprises modernize complex software with confidence by using a living map of an organization’s architecture that stays accurate from planning through delivery. Before writing code, Devsu’s senior engineers map the entire system—dependencies, technical debt, integration points, and more—and keep that map connected to execution on Velx, their proprietary platform for architectural visibility. As the system evolves, the plan evolves with it, reducing surprises and guiding decisions based on how the system actually works today. This approach contrasts with traditional modernization plans that go stale, aiming to deliver faster results with less risk. Devsu’s goal is to enable faster, safer modernization of mission-critical systems and the creation of new digital products by embedding architectural visibility into the delivery process.

Company size
51-200
Company stage
Not listed
Total funding
Not listed
Headquarters
Orlando, FL
Founded
2010

Recently Posted Jobs

Explore more opportunities at Devsu

See more jobs