Application Security Engineer

State Street

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Quincy, MA
Salary: $90,000–$157,500 / yr
Employment: Full-time
Posted: 21 days ago
Freshness: Confirmed live today
Closes: Dec 18, 2026
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $180k

This role $124k

$75k $232k

below market most similar roles pay here above market

This role pays less than 91% of similar roles. Most pay $145,000–$215,784 — the blue band above. At the midpoint, this role pays about $124k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 351 open roles on FindRole.

Listed pay typically runs $115,000–$195,944 across 199 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Application Security Engineer

Role Posting Log in to save

The Application Security Engineer - Agentic Harness joins the Cyber Security Architecture & Engineering team to integrate cybersecurity into agile practices. You will build the DevSecOps and AppSec strategy by partnering with engineering leads to implement secure software development lifecycle processes. Daily responsibilities include onboarding application teams to security tools, triaging SAST and SCA vulnerabilities, and managing reporting via dashboards. You will develop and maintain documentation while supporting audit processes to close findings. The role requires proficiency in Java, .Net, Python, and Node.js, alongside experience with Azure, AWS, and container security. Candidates should possess skills in Ansible, Terraform, or Kubernetes, and understand Infrastructure as Code principles. This position solves the technical challenge of automating security within CI/CD pipelines across a hybrid cloud environment.

Skills

DevSecOps AppSec CI/CD SAST SCA DAST Container Security Java .Net Python Node.js AWS Azure Terraform Kubernetes Ansible Infrastructure as Code Agile SSDLC Cloud Security System Hardening

What you'll do

Build a DevSecOps and AppSec strategy to integrate cybersecurity into agile practices.
Partner with engineering leads to implement DevSecOps and AppSec principles and processes.
Onboard application teams to security tools and troubleshoot platform integrations with vendors.
Triage SAST and SCA vulnerabilities and partner with the development community to remediate them.
Deliver security metrics and reporting via dashboards.
Develop and maintain application security and DevSecOps documentation.
Provide documentation and support to assist in audit processes and close findings.
Continuously improve DevSecOps and Application Security tools and processes.

What we're looking for

Bachelor’s degree in information technology, computer science, or a related field.
6 years of relevant experience.
Extensive experience in application security including SAST, DAST, SCA, and container security.
Experience developing software in technologies such as Java, .Net, Python, and Node.js.
Experience in cloud technologies such as Azure and AWS.
Current information security certification, including CISSP.
Experience with automation and orchestration tools such as Ansible, Terraform, or Kubernetes (preferred).
Knowledge of Infrastructure as Code (IaC) principles and experience automating deployment in a hybrid cloud environment (preferred).

Similar roles

Application Security Engineer

State Street

Quincy, MA +4 60 days ago

DevSecOps AppSec CI/CD SAST DAST SCA Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile API Security Container Security SSDLC

6+ yrs exp

Save

Application Security Engineer

Booz Allen Hamilton

Annapolis Junction, MD +1 39 days ago $69,400–$158,000

SAST DAST SCA DevSecOps Secure SDLC Container Security Cloud Security Vulnerability Management OWASP SAMM BSIMM NIST SSDF NIST CSF ISO 27001 MITRE ATT&CK ISO/IEC 42001 IEC 62443

2+ yrs exp

Save

Security Engineer, Application Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 14 days ago $118,500–$171,825

Application Security DevSecOps SAST DAST SCA Threat Modeling Infrastructure as Code Python Java JavaScript TypeScript Node.js C# Go SQL Bash AWS Azure Kubernetes OpenShift Docker Terraform Bicep Helm GitHub Actions Jenkins Azure DevOps Burp Suite OWASP ZAP Checkmarx Veracode Fortify SonarQube Snyk Prisma Cloud Wiz Tenable Aqua Security Trivy Postman SoapUI HIPAA HITRUST NIST Cybersecurity Framework FedRAMP FISMA FIPS OWASP Top 10 OWASP API Security Top 10 OWASP ASVS

5+ yrs exp Hybrid

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 91 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC

6+ yrs exp

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +4 54 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Maven Central PyPI SLSA Infrastructure as Code SSDLC

6+ yrs exp

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA 54 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java Python .Net Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC

10+ yrs exp

Save