Application Security Engineer

Why Choose Bottomline?

Are you ready to transform the way businesses pay and get paid? Bottomline is a global leader in business payments and cash management, with over 35 years of experience and moving more than $16 trillion in payments annually. We're looking for passionate individuals to join our team and help drive impactful results for our customers. If you're dedicated to delighting customers and promoting growth and innovation - we want you on our team!

  Required Experience & Qualifications 

• 3+ years’ experience in Application Security, Penetration Testing, or Secure Code Scanning 

• Hands-on experience with penetration testing techniques and tools 

• Experience with application security scanning platforms (SAST, SCA, DAST) 

• Strong understanding of common vulnerability patterns (e.g. OWASP Top 10) 

• Knowledge of modern environments (APIs, microservices, CI/CD pipelines) 

• Strong analytical, problem-solving, and communication skills 

 Preferred Experience & Qualifications 

• Experience with platforms such as Veracode, Burp Suite, OWASP ZAP, or similar 

• Understanding of risk-based or threat exposure management models 

• Experience working with development teams in secure coding practices 

• Relevant certifications such as: 
  OSCP, OSWE, GWAPT, GPEN, CEH, CSSLP, CISSP or CISM 

  Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.

We welcome talent at all career stages and are dedicated to understanding and supporting additional needs. We're proud to be an equal opportunity employer, committed to creating an inclusive and open environment for everyone.