Envestnet
Product Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Envestnet
Envestnet is a prominent wealth technology platform and financial wellness network based in Chicago. Founded in 1999, the company provides Software-as-a-Service (SaaS) solutions that empower over 109,000 financial advisors across more than 4,900 companies to manage over $6 trillion in assets and nearly 20 million accounts. Envestnet's innovative offerings include a core platform for unified advice, investment services, and practice management, as well as specialized tools like the Sustainability Platform™ for socially responsible investing and Unified Managed Household for comprehensive client asset analysis. The company has a rich history of growth through partnerships and acquisitions, launching its unified advice platform in 2000 and going public in 2010. Envestnet has been recognized as a leader in financial planning and portfolio management solutions. Its ecosystem supports over 800 asset managers and integrates with various partners to enhance advisor productivity and client experiences. Envestnet serves a diverse clientele, including major banks, wealth management firms, and financial professionals, focusing on delivering data-driven tools for financial wellness at every life stage.
Security at Envestnet
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Envestnet's AppSec philosophy centers on exceeding the security and trust of clients and partners while protecting information from unwarranted disclosure.
- The company is committed to weaving security into daily coding practices through a developer enablement approach that employs a more hands-on, interactive methodology.
- The organization has adopted a 'shift left' strategy to embed security earlier in the development lifecycle while maintaining focus on Confidentiality, Integrity, and Availability as core risk principles.
Security Team
- Envestnet maintains a dedicated independent application security program integrated with its development and release lifecycle.
- The AppSec team is estimated at 10-15 professionals based on LinkedIn search results.
- Key leaders include Derek Fisher (Head of Product Security) and Saran Makam (Director of Application Security at Envestnet | Yodlee).
- The team reports into the Director of Security Operations.
- As of March 2026, there are 2 active AppSec job postings with common skill patterns in automation of SAST/DAST/IAST/SCA, CI/CD pipeline integration, and DevSecOps practices.
Key Initiatives
- Envestnet has implemented a Security Champions Program with all Security Champions completing certification in 2022, and 60% of Security Aware developers completing Levels 1 & 2 training through Secure Code Warrior.
- The company practices 'shift left' by designing and implementing secure CI/CD pipelines with integrated security controls.
- Their vulnerability management process includes a 90-day disclosure window from initial acknowledgment prior to public disclosure.
- Security testing automation encompasses SAST, DAST, IAST, SCA, and container scanning.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.