Lead Application Security Engineer

St John's, Newfoundland and Labrador, CanadaPosted 10 months agoWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Nasdaq

Nasdaq, Inc. is a leading financial services corporation based in New York City. It operates the Nasdaq Stock Market, the first electronic stock market established in 1971. The company provides a range of technology-based products and services, including data, analytics, software, exchange capabilities, and advisory services to corporate clients, investment managers, banks, brokers, and exchange operators around the world. With a history of innovation, Nasdaq has grown to list approximately 3,100 companies and facilitates the trading of around 2 billion shares daily, making it a major player in the U.S. securities market. The company offers a fully electronic trading platform, real-time market data, advanced analytics, and various advisory services to support its clients. Nasdaq is committed to enhancing liquidity, efficiency, and investor protection through its technological advancements and global operations.

Industry

financial services

Employees

9,400

1781 engineers

Revenue

$7.4B

Website

Visit →

Security at Nasdaq

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Nasdaq's Boardvantage is "protected by multiple layers of security, including application security".
Nasdaq follows a "70/20/10 Learning Principle"where "70% of development happens on the job".
Specific AppSec mission, developer enablement vs.

Security Team

Key Public-Facing Leaders: Lou Modano, Chief Information Security Officer at Nasdaq.
Key Quote: "leading and executing the company's Global Information Security Program".
Active AppSec Job Postings (as_of:): Count: At least 1-2 public listings found.
Common Skill/Tool Patterns: "penetration testing", "Red Teaming", "DAST", "SAST", "Google cloud".

Key Initiatives

Secure SDLC Artifacts include "penetration testing, Red Teaming and Risk assessments".
Recent initiatives involve Information Security serving as a "primary point of contact for a Google cloud-based technology project".

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Nasdaq's site