Senior Application Security Engineer (Java), VP

Description

The company is a global bank with about 200 million customer accounts, operating in more than 160 countries and jurisdictions.

It serves consumers, corporations, governments and institutions through consumer banking and credit, corporate and investment banking, securities brokerage, transaction services and wealth management.

This role sits in the Technology Infrastructure team within Operations & Technology, which builds secure, reliable and efficient services that keep the bank running and protect it.

The job belongs to the Technology group and the Systems & Engineering job family.

You would own the full engineering lifecycle of critical authentication and information security platforms, covering build, maintenance, evaluation and rollout.

The work combines Java development, Shell and SQL automation, and hands-on knowledge of multifactor authentication such as MFA/2FA, OTP, Challenge/Response and RADIUS.

The team is also moving authentication services from VMs to containerized, cloud-based OpenShift platforms and upgrading older authentication components.

Responsibilities

• Maintain, enhance and debug Java applications and microservices that support authentication flows and security controls.
• Assess new software versions, third-party libraries and security updates for compatibility, performance and risk.
• Set up and configure authentication frameworks and protocols, including 2FA/MFA, OTP, Challenge/Response and RADIUS.
• Certify each new SafeWord authentication release before it goes to production.
• Stage and check security patches across the authentication infrastructure.
• Test MFA and RADIUS integrations to confirm they work with enterprise applications.
• Write Bash automation scripts that simplify operations and deployments.
• Write and tune SQL and PL-SQL scripts and procedures.
• Work with operations teams to test, validate and certify software releases before deployment.
• Help move authentication services from virtual machines to containers on cloud ECS OpenShift.
• Help bring modern multi-factor authentication into enterprise applications as part of the legacy upgrade work.
• Write and keep up to date the standard operating procedures for the authentication platform.
• Troubleshoot complex production issues and keep authentication services available, resilient and secure.
• Perform other job-related duties as needed.

Requirements

• At least 4 years of progressively responsible experience in software engineering, application security or infrastructure engineering, with a clear focus on authentication systems.
• Strong hands-on Java skills, including debugging and maintaining enterprise Java applications.
• Solid grasp of 2FA/MFA, OTP and Challenge/Response authentication designs.
• Practical knowledge of RADIUS, LDAP/Active Directory, Kerberos, SAML and PAM.
• Advanced Linux or Unix skills, covering administration, process management, file permissions and performance tuning.
• Strong Shell scripting in Bash and KornShell for automation and orchestration.
• Proficiency in writing SQL and PL-SQL queries and scripts.
• Strong understanding of TCP/IP, DNS, SSL/TLS certificates, load balancing and firewall rules.
• Hands-on experience with Splunk, including search syntax, alerts and dashboards.
• Hands-on experience with AppDynamics, including APM and transaction tracing.
• Working knowledge of cloud concepts on AWS, GCP or enterprise private clouds.
• A record of working well with operations, security operations and engineering teams.
• Clear written and verbal communication, including technical documentation and incident retrospectives.
• Careful attention to security best practices, access governance and audit readiness.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering or a related technical field.
• Preferred: familiarity with containers and orchestration tools such as Docker, OpenShift or Kubernetes.
• Preferred: experience in financial services, banking or other highly regulated enterprise settings.
• Preferred: industry certifications in information security or networking, such as CompTIA Security+, Network+, CEH or CCNA.

Conditions

Full-time position based in Irving, Texas, United States.

Primary full-time salary range is $125,760.00 to $188,640.00.

The posting closes on Oct 28, 2026.

Hiring decisions are made by people, although automated tools, including AI, help match skills to roles; equal opportunity applies to all candidates.

Benefits

• Eligible employees may receive discretionary and formulaic incentive and retention awards.
• Medical, dental and vision coverage, a 401(k), life, accident and disability insurance, and wellness programs.
• Paid vacation, paid sick leave and paid holidays.
• Benefit availability varies by jurisdiction, job level and date of hire.