ApplicationSecurityEngineer3

Responsible for leading application security engineering efforts, designing scalable security architectures, performing advanced risk assessments, integrating security across the SDLC, driving AI‑related security controls, evaluating vendor solutions, scaling automation, and contributing to incident response and strategic security improvements. **_About the Team_ :** Bloomberg Industry Group's Application Security team is focused on providing best-in-class security for all internal and external applications. We are constantly evolving our security practices to tackle modern-day threats and ensure our applications remain secure. **_Job Summary_ :** As an Application Security Engineer III, you will lead security engineering initiatives, perform advanced risk assessments, and design scalable security controls across critical applications. You will serve as a subject matter expert (SME) in application, guiding engineering teams, influencing security strategy, and driving automation across the SDLC. This role requires deep technical expertise, leadership potential, and the ability to shape long‑term Application Security direction. **_What You Will Do_ :** * Design and implement security architectures and controls for large-scale, cloud-native applications. * Conduct in-depth risk assessments, including penetration testing and code reviews. * Collaborate with developers and DevOps teams to integrate security at all stages of the software development lifecycle (SDLC). * Drive security for AI-powered features by defining secure architectures, assessing AI/ML risks, and implementing advanced testing and controls for AI models, agents, and MCP servers. * Identify areas of improvements in security tools and practices, and remediate the identified gap by implementing innovative solutions. * Evaluate third‑party security tools and vendor‑provided controls for technical effectiveness, enterprise fit, and alignment with organization’s security architecture and standards. * Collabo