Company Description
Encora Inc. is a global digital engineering leader, specializing in enabling enterprises to adopt AI-powered technologies and agile digital solutions. Founded in Silicon Valley, the company leverages two decades of expertise at the intersection of Cloud, Data, and AI to drive innovation and modernization across industries. With a team of over 9,500 professionals across multiple continents, Encora combines nearshore agility with global scale. Supported by Advent International and Warburg Pincus, Encora uses its proprietary Encora AIVA platform to provide cutting-edge orchestration for AI-native engineering.
Key Responsibilities:
- Threat Modeling: Lead design reviews for new banking features (Payments, Transfers,KYC). Identify logic flaws before code is written.
- Pipeline Automation: Architect and maintain the SAST/DAST/SCA tooling in the CI/CD pipeline (e.g., SonarQube, Snyk, GitLab CI) to block vulnerabilities automatically.
- Code Review: Perform manual code audits on high-risk components (Authentication,Ledger logic) in Java, Kotlin, or Swift.
- Cloud & AI Patterns: Deliver API, container, cloud, and AI security design patterns.
- Ensure that developers have paved roads (secure templates) for deploying microservices and AI models.
- Culture: Act as a mentor to the development team, running secure coding workshops and championing a Security Champion program.
Technical Requirements:
- 5+ years in Application Security with a background in Software Development.
- Proficiency in at least one core language: Java (Spring Boot), Node.js, or Go.
- Deep understanding of OWASP Top 10 and SANS Top 25.
- Experience with CI/CD integration (Jenkins, GitHub Actions).
- Bonus: Experience in Fintech or Banking
