Application Security Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Quincy, MAToronto, Ontario, CanadaAustin, TXAtlanta, GA
Salary
$120,000–$202,500 / yr
Posted
45 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $173k
This role $161k
$109k most similar roles pay here $219k

This role pays less than 58% of similar roles. Most pay $144,375–$202,575 — the shaded band above. At the midpoint, this role pays about $161k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Application Security Engineer

Role Posting Log in to save

The Application Security Engineer - ADR joins the Cyber Security Architecture & Engineering team to design, implement, and support Application Detection and Response capabilities across the enterprise application portfolio. This role focuses on integrating runtime application security monitoring and threat detection into broader AppSec and DevSecOps programs while collaborating with engineering and security operations teams to triage and remediate vulnerabilities. The successful candidate will build detection logic, alert mechanisms, and response workflows to identify malicious activity in web, mobile, and cloud-native environments. Key technical requirements include experience with Java, .NET, Python, Node.js, Azure, AWS, and Infrastructure as Code tools like Ansible and Terraform. Expertise is required in SAST, DAST, SCA, RASP, WAAP, and API security to protect against OWASP Top 10 threats while ensuring compliance during internal and external audits.

Skills

AppSec ADR DevSecOps SAST DAST SCA RASP WAAP API Security OWASP Top 10 Java Python .NET Node.js AWS Azure Ansible Terraform Kubernetes CI/CD Infrastructure as Code

What you'll do

  • Define and build the organization's Application Detection and Response (ADR) strategy and roadmap.
  • Deploy, onboard, and provide operational support for ADR platforms across the enterprise portfolio.
  • Monitor and investigate application-layer security events, attack patterns, and anomalous behaviors.
  • Develop use cases, detection logic, alerting mechanisms, and response workflows to improve visibility.
  • Triage and remediate security findings and threat indicators in collaboration with development teams.
  • Integrate ADR platforms into existing incident response processes and DevSecOps programs.
  • Create security reports, dashboards, and metrics for technical and executive stakeholders.
  • Maintain documentation regarding ADR, AppSec, and DevSecOps standards and operational procedures.

What we're looking for

  • Bachelor’s degree in information technology, computer science, or a related field.
  • 6 years of relevant experience in the field.
  • Expertise in Application Security (AppSec), Application Detection and Response (ADR), and DevSecOps.
  • Experience with software development in languages such as Java, .NET, Python, or Node.js.
  • Proficiency with cloud technologies including Azure and AWS.
  • Experience with security tools including SAST, DAST, SCA, API Security, and Container Security.
  • Familiarity with automation and orchestration tools like Ansible, Terraform, Kubernetes, and Infrastructure as Code.
  • Possession of a Security+ or other cybersecurity certification; CISSP, GCIH, or GWAPT are highly desirable.

Related searches

More Application Security Engineer jobs Application Security Engineer jobs in Quincy All jobs at State Street

More like this

Similar roles

Application Security Engineer

State Street

Quincy, MA +4 14 days ago $120,000–$202,500
AppSec DevSecOps SAST DAST SCA CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC API Security Container Scanning
6+ yrs exp
Save

Application Security Engineer

State Street

Quincy, MA 45 days ago $100,000–$167,500
AppSec DevSecOps SAST SCA DAST CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC Container Security
6+ yrs exp
Save

Senior Application Security Engineer

AbbVie

Irvine, CA 42 days ago $109,500–$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation CSPM Snyk Endor Labs OWASP Top 10 CWE
7+ yrs exp
Save

Senior Application Security Engineer

AbbVie

Chicago, IL 42 days ago $109,500–$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation OWASP Top 10 CWE CSPM Snyk Endor Labs
7+ yrs exp
Save

Software Supply Chain Security Engineer

State Street

Quincy, MA 8 days ago $120,000–$202,500
AppSec DevSecOps CI/CD Software Supply Chain Security JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
10+ yrs exp
Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 45 days ago $90,000–$157,500
AppSec DevSecOps Software Supply Chain Security CI/CD JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
6+ yrs exp
Save