Application Security Engineer

State Street

Confirmed live 2 days ago Trusted

Quick summary

Work type
On-site
Location
Quincy, MAToronto, Ontario, CanadaBoston, MAClifton, NJAustin, TX
Salary
$120,000–$202,500 / yr
Posted
14 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $177k
This role $161k
$109k most similar roles pay here $227k

This role pays less than 60% of similar roles. Most pay $145,525–$208,800 — the shaded band above. At the midpoint, this role pays about $161k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Application Security Engineer

The Application Security Engineer joins the Cyber Security Architecture & Engineering team to build and operationalize DevSecOps and AppSec strategies within an agile environment. This role involves integrating cybersecurity into organizational practices, partnering with engineering teams to implement security tools, and assisting the development community in triaging DAST, API security testing, and container scanning vulnerabilities. The successful candidate will manage documentation, report metrics via dashboards, and support audit processes while ensuring continuous improvement of automated CI/CD pipelines. Required technical skills include experience with Java, .Net, Python, Node.js, Azure, and AWS. Candidates should possess expertise in SAST, SCA, and Infrastructure as Code using Ansible, Terraform, or Kubernetes. The role focuses on solving security challenges within a large-scale environment by automating deployment tasks and hardening systems across hybrid cloud infrastructures to protect diverse applications.

What you'll do

  • Build the DevSecOps and AppSec strategy to integrate cybersecurity into agile practices.
  • Partner with engineering teams to implement and operationalize DevSecOps and AppSec principles.
  • Onboard application teams to security tools and troubleshoot integration issues with vendors.
  • Triage DAST, API Security testing, and container scanning vulnerabilities for the development community.
  • Deliver security metrics and reporting through automated dashboards.
  • Develop and maintain comprehensive documentation for application security and DevSecOps processes.
  • Support audit processes by providing necessary documentation to resolve findings.
  • Continuously improve DevSecOps tools and security processes based on project objectives.

What we're looking for

  • Bachelor’s degree in information technology, computer science, or a related field.
  • Relevant experience in the field.
  • Current information security certification, such as CISSP or Security+.
  • Extensive experience in application security including SAST, DAST, SCA, API, and Container scanning.
  • Experience with DevSecOps, CI/CD pipelines, and automated security processes.
  • Proficiency in software development using technologies like Java, .Net, Python, or Node.js.
  • Experience with cloud platforms (Azure, AWS) and automation tools like Ansible, Terraform, or Kubernetes.
  • Strong communication skills and experience working within Agile and Scrum frameworks.

More like this

Similar roles

Application Security Engineer

State Street

Quincy, MA 45 days ago $100,000$167,500
AppSec DevSecOps SAST SCA DAST CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC Container Security
6+ yrs exp

Senior Application Security Engineer

AbbVie

Irvine, CA 42 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation CSPM Snyk Endor Labs OWASP Top 10 CWE
7+ yrs exp

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 45 days ago $90,000$157,500
AppSec DevSecOps Software Supply Chain Security CI/CD JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
6+ yrs exp

Software Supply Chain Security Engineer

State Street

Quincy, MA 8 days ago $120,000$202,500
AppSec DevSecOps CI/CD Software Supply Chain Security JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
10+ yrs exp

Supply Chain Security Lead

State Street

Quincy, MA 45 days ago $120,000$217,500
AppSec Software Supply Chain Security DevSecOps CI/CD SBOM JFrog Artifactory Maven Central PyPI SLSA Java Python .Net Node.js AWS Azure Ansible Terraform Kubernetes Infrastructure as Code Agile
10+ yrs exp

Application Security Engineer

State Street

Quincy, MA +3 45 days ago $120,000$202,500
AppSec ADR DevSecOps SAST DAST SCA RASP WAAP API Security OWASP Top 10 Java Python .NET Node.js AWS Azure Ansible Terraform Kubernetes CI/CD Infrastructure as Code
6+ yrs exp