Application Security Engineer

State Street

Confirmed live yesterday Trusted

Quick summary

Work type: On-site
Location: Quincy, MA
Salary: $100,000–$167,500 / yr
Posted: 45 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $175k

This role $134k

$86k most similar roles pay here $234k

This role pays less than 85% of similar roles. Most pay $145,000–$205,325 — the shaded band above. At the midpoint, this role pays about $134k versus about $175k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Application Security Engineer

Role Posting Log in to save

The Application Security Engineer - Agentic Harness joins the Cyber Security Architecture & Engineering team to integrate cybersecurity into agile practices through DevSecOps and AppSec strategies. This role involves partnering with engineering leads to implement security principles, onboarding application teams to security tools, and triaging SAST and SCA vulnerabilities for remediation. The engineer will also manage documentation, provide audit support, and develop reporting dashboards. Key technical requirements include proficiency in Java, .Net, Python, or Node.js, alongside experience with Azure, AWS, and container security. Candidates should possess skills in automation and orchestration tools like Ansible, Terraform, or Kubernetes, while applying Infrastructure as Code principles. The role focuses on solving the challenge of securing a large number of applications within a hybrid cloud environment by automating security processes throughout the software development lifecycle.

Skills

AppSec DevSecOps SAST SCA DAST CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC Container Security

What you'll do

Build DevSecOps and AppSec strategies to integrate cybersecurity into agile practices.
Implement DevSecOps and AppSec principles and processes in partnership with engineering leads.
Onboard application teams to security tools and troubleshoot integration issues with vendors.
Triage SAST and SCA vulnerabilities and partner with developers to remediate them.
Create and maintain technical documentation for application security and DevSecOps processes.
Provide reporting, dashboards, and metrics regarding security performance.
Support audit processes by providing necessary documentation to close findings.
Continuously improve DevSecOps tools and application security workflows.

What we're looking for

Bachelor’s degree in information technology, computer science, or a related field.
Experience with application security tools including SAST, DAST, SCA, and container security.
Proficiency in programming languages such as Java, .Net, Python, or Node.js.
Experience with cloud technologies like Azure and AWS.
Knowledge of automation and orchestration tools such as Ansible, Terraform, or Kubernetes.
Current information security certifications, such as CISSP or Security+.
Experience with DevSecOps, CI/CD pipelines, and the software development lifecycle (SDLC).

Save