Application Security Engineer AppSec
Zenus Bank is a Puerto Rico-chartered international digital bank providing cross-border USD banking, embedded accounts, payment rails, Visa card sponsorship, FX, compliance, settlement, and stablecoin infrastructure.
Funding history
Projects
About Zenus Bank
Founded in 2019, Zenus Bank operates as an International Financial Entity under Puerto Rico law and is regulated by OCIF under license IFE-061. Its current platform provides global USD accounts, embedded virtual accounts, cross-border payment rails, Visa debit/credit/corporate/crypto card programs, foreign exchange, compliance-as-a-service, 24/7 settlement, and USDC/stablecoin on-ramp and off-ramp capabilities. The bank describes itself as full-reserve and states that it is not FDIC-insured.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will secure applications, APIs, and software components throughout the development lifecycle. You will perform automated and manual security testing, conduct threat modeling, document vulnerabilities, support remediation, maintain coding standards, validate fixes before release, track findings, and provide security evidence for audits.
Requirements
- Three or more years of experience in application security, secure software development, or ethical hacking
- Knowledge of secure coding principles and common application vulnerabilities
- Hands-on experience with SAST, DAST, and SCA tools
- Experience performing manual application and API penetration testing
- Familiarity with REST APIs, authentication mechanisms, and authorization models
- Understanding of CI/CD pipelines from a security testing perspective
- Documentation and vulnerability reporting skills
Responsibilities
- Perform SAST, SCA, and DAST application security testing
- Execute manual penetration testing of applications and APIs
- Conduct threat modeling for new applications and significant changes
- Identify, analyze, and document application vulnerabilities and security weaknesses
- Support secure remediation and secure coding practices with development teams
- Define and maintain secure coding standards aligned with OWASP Top 10 and OWASP API Top 10
- Validate remediation of security findings before release
- Maintain vulnerability tracking and reporting
- Provide application security evidence for audits and security assessments
