Bloomberg Industry Group
Application Security Engineer 1
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Bloomberg Industry Group
Bloomberg Industry Group, an affiliate of Bloomberg L.P., provides essential legal, tax, regulatory, and business news and analysis for professionals in law, government, tax, and accounting. Founded in 1929 as the Bureau of National Affairs, the company became employee-owned in 1947 and was acquired by Bloomberg L.P. in 2011. It rebranded to Bloomberg Industry Group in 2019 and is headquartered in Arlington, Virginia. The company offers integrated platforms such as Bloomberg Law, which delivers legal intelligence and practical analysis; Bloomberg Tax, providing tax strategies and resources; and Bloomberg Government, focusing on policy and government affairs intelligence. Additionally, it covers areas like environment, health, safety, and government contracting, utilizing advanced technology for quick access to in-depth analysis. Bloomberg Industry Group also offers software for managing fixed and leased assets, ensuring compliance with various accounting standards.
Security at Bloomberg Industry Group
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Bloomberg Industry Group's AppSec team operates with a 'department of safe yes' mindset, focusing on enabling development while managing a changing risk profile driven by AI.
- Their mission is to ensure the security of both internal and external services by integrating security directly into the SDLC.
- Security leaders are transitioning from the 'department of no' to the 'department of safe yes'.
- AI-assisted development is recognized as an immediate challenge, not a future problem, requiring adaptive risk management strategies.
Security Team
- Key Leader: Tejas Dakve, Application Security Leader.
- The team is collaborative and works across the SDLC, focusing on improving security across the software development lifecycle while working closely with engineering teams. There are 2 active postings for Application Security Engineer positions (levels 1 and 3).
- The team emphasizes strong focus on AI/ML security, cloud-native architecture, and automation within CI/CD pipelines.
Key Initiatives
- AI Security Integration: Securing AI-powered features by defining secure architectures and assessing AI/ML risks.
- CI/CD Automation: Building, improving, and scaling security automation, integrating tooling across CI/CD pipelines and cloud platforms. Vulnerability Management: Participating in vulnerability management processes.
- Shift Left: Collaborating with developers and DevOps teams to integrate security at all stages of the software development lifecycle.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.