{"id":2197866,"url":"https://alion.io/job/wintrust-financial-senior-application-security-specialist","title":"Senior Application Security Specialist","company":{"id":6066,"name":"Wintrust Financial","domain":"wintrust.com","url":"https://alion.io/company/wintrust","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":28,"ghost_share":0,"stale_share":0.679,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":117000,"max":158000,"currency":"USD","period":"year","gross":null,"usd_annual":158000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Java","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Akamai","optional":true}],"status":"live","first_seen_at":"2026-10-09T20:10:41Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-18T16:18:08Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Wintrust provides community and commercial banking, specialty finance and wealth management services through its 16 bank charters and nine non-bank businesses. Wintrust delivers the sophisticated solutions of a large bank while staying true to the relationship-focused,personalized service of our community banking roots. We serve clients in all 50 states with more than 200 branch banking locations in Illinois, southwestern Florida, northwestern Indiana, west Michigan and southern Wisconsin and commercial banking offices in Chicago, Denver, Milwaukee, Grand Rapids, Mich., and in key branch banking locations throughout Illinois. Our people are the heart of our business and we are proud to rank consistently as a top place to work. Wintrust is a $66 billion financial institution based in Rosemont, Illinois, and listed on the NASDAQ Global Select Market under the symbol “WTFC.”\nWhy join us?\n\nAn award-winning culture! We are rated a Top Workplace by the Chicago Tribune (past 10 years) and Employee Recommended award by the Globe & Mail (past 6 years)\nCompetitive pay and discretionary or incentive bonus eligible\nComprehensive benefit package including medical, dental, vision, life, a 401k plan with a generous company match and tuition reimbursement to name a few\nPromote from within culture\nWhy join this team?\nThis position has the opportunity to interface with and have a positive impact on multiple areas of Wintrust's business\nWe hold ourselves accountable to high standards, share wins, operate ethically, and have fun\nPosition Summary:\nThe Senior Application Security Specialist leads the design, implementation, and continuous improvement of security across enterprise applications, APIs, and SaaS platforms. This role partners with development teams to embed security throughout the software development life cycle (SDLC), reduce application risk, and implement AI-assisted engineering workflows aligned with enterprise security and regulatory requirements.\nEssential Responsibilities:\nLead application threat modeling, security architecture reviews, and manual code reviews. Define requirements for authentication, authorization, data protection, and secure design across web applications, APIs, and cloud-hosted services.\nImplement and tune static application security testing (SAST) and software composition analysis (SCA) with Checkmarx. Integrate dynamic testing (DAST), secrets scanning, and risk-based security gates into continuous integration and delivery (CI/CD) pipelines.\nSupport API discovery, posture assessment, security testing, and runtime monitoring with enterprise API security toolset. Investigate sensitive data exposure, broken authorization, and API abuse with application owners and security operations.\nDesign and implement AI-assisted SDLC workflows for code review, unit and integration test generation, security testing, vulnerability triage, and remediation. Establish human review, source-code and data protection, and validation of AI-generated code and tests.\nDrive application vulnerability remediation based on exploitability, exposure, and business impact. Validate fixes, support incident response, and track testing coverage, remediation times, and recurring defects to support risk and compliance reporting.\nCoach developers on secure coding and maintain reusable security patterns and guidance. Evaluate AI workflow adoption, finding quality, test coverage, and time savings to improve security and developer productivity.\nQualifications:\n5-7 years of relevant experience\nBachelor’s degree or equivalent; Computer Science or Cybersecurity preferred\nApplication security, cybersecurity, and/or Artificial Intelligence certifications preferred\nRequired experience: Experience in application security, secure development, or DevSecOps, including threat modeling, manual code review, API testing, vulnerability remediation, and Git-based CI/CD integration. Ability to review Java, Apex and/or Python code and build automation. Knowledge of OWASP Top 10, API Security Top 10, ASVS, authentication, authorization, OAuth/OIDC, and secrets management.\nPreferred experience: Experience implementing AI-assisted SDLC workflows for code review, test generation, security testing, and remediation, with measurable results. Ability to apply human review, validate AI-generated code and tests, and protect sensitive data. Experience with Checkmarx, Akamai API Security, or comparable tools. Experience communicating risk and supporting regulated financial services\nBenefits\nMedical Insurance\nDental\nVision\nLife insurance\nAccidental death and dismemberment\nShort-term and long term Disability Insurance\nParental Leave\nEmployee Assistance Program (EAP)\nTraditional and Roth 401(k) with company match\nFlexible Spending Account (FSA)\nEmployee Stock Purchase Plan at 5% discount\nCritical Illness Insurance\nAccident Insurance\nTransportation and Commuting Benefits\nBanking Benefits\nPet Insurance\nCompensation\nThe estimated salary range for this role is $117,000- $158,000, along with eligibility to earn an annual bonus. Actual salaries may vary based on several factors, such as a candidate’s qualifications, skills and experience.\nFrom our first day in business, Wintrust has been proud to serve a variety of unique communities and people from all walks of life. To build a company that reflects the communities we serve, we believe that fostering a unique and inclusive workplace where everyone feels valued and empowered to succeed will support our ongoing success. Wintrust Financial Corporation, including community banking and financial services subsidiaries, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.","description_format":"text","description_chars":5861,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Health insurance","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commercial & Retail Banks","Wealth Management & Financial Advisors","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-09T20:10:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 26 · green card filings: 11","filings_12m":26,"filings_prev_12m":23,"green_card_filings_12m":11,"median_offered_wage_usd":141014,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.607,"p_room":1,"age_days":9,"expected_fill_days":29,"reasons":["conf:13","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":158000,"is_top_pay":false},"html_url":"https://alion.io/job/wintrust-financial-senior-application-security-specialist","json_url":"https://alion.io/job/wintrust-financial-senior-application-security-specialist.json","meta":{"generated_at":"2026-10-20T00:36:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":768,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6066},"rest":"https://alion.io/mcp/rest/get_company?id=6066"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwintrust-financial-senior-application-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwintrust-financial-senior-application-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwintrust-financial-senior-application-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wintrust-financial-senior-application-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwintrust-financial-senior-application-security-specialist"}]}