Application Security Engineer

State Street

Confirmed live today Trusted

Quick summary

Work type: On-site
Location: Quincy, MAToronto, Ontario, CanadaBoston, MAClifton, NJAustin, TX
Employment: Full-time
Posted: 60 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $176k

$119k $218k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $142,487–$208,800.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 351 open roles on FindRole.

Listed pay typically runs $115,000–$195,944 across 199 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Application Security Engineer

Role Posting Log in to save

The Application Security Engineer joins the Cyber Security Architecture & Engineering team to integrate cybersecurity into agile practices through a robust DevSecOps and AppSec strategy. The role involves designing and supporting agile solutions for numerous applications, partnering with engineering teams to operationalize security principles, and onboarding teams to security tools. Key responsibilities include triaging DAST, API security testing, and container scanning vulnerabilities, as well as managing reporting metrics and audit documentation. Candidates must possess experience with Java, .Net, Python, and Node.js, alongside cloud technologies like Azure and AWS. Proficiency in SAST, SCA, Ansible, Terraform, and Kubernetes is required. The position focuses on automating security processes within CI/CD pipelines and managing software development lifecycles to solve complex security challenges in a hybrid cloud environment.

Skills

DevSecOps AppSec CI/CD SAST DAST SCA Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile API Security Container Security SSDLC

What you'll do

Build a DevSecOps and AppSec strategy to integrate cybersecurity into agile practices.
Partner with engineering teams to operationalize DevSecOps and AppSec principles.
Onboard application teams to security tools and troubleshoot platform integrations with vendors.
Triage and remediate vulnerabilities from DAST, API security testing, and container scanning.
Deliver security metrics and reporting via dashboards.
Develop and maintain comprehensive application security and DevSecOps documentation.
Provide documentation and support to resolve findings during audit processes.
Continuously improve DevSecOps processes and security tools across the organization.

What we're looking for

Bachelor’s degree in information technology, computer science, or a related field.
Relevant experience in information technology.
Proven expertise in Application Security (AppSec) and DevSecOps.
Experience in software development and the software development lifecycle (SDLC).
Experience with application security tooling and operations within modern CI/CD pipelines.
Experience with automation and orchestration tools like Ansible, Terraform, or Kubernetes (preferred).
Current information security certification, such as CISSP (preferred).
Security+ or other cybersecurity security certification (preferred).

Similar roles

Application Security Engineer

Booz Allen Hamilton

Annapolis Junction, MD +1 39 days ago $69,400–$158,000

SAST DAST SCA DevSecOps Secure SDLC Container Security Cloud Security Vulnerability Management OWASP SAMM BSIMM NIST SSDF NIST CSF ISO 27001 MITRE ATT&CK ISO/IEC 42001 IEC 62443

2+ yrs exp

Save

Security Engineer, Application Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 14 days ago $118,500–$171,825

Application Security DevSecOps SAST DAST SCA Threat Modeling Infrastructure as Code Python Java JavaScript TypeScript Node.js C# Go SQL Bash AWS Azure Kubernetes OpenShift Docker Terraform Bicep Helm GitHub Actions Jenkins Azure DevOps Burp Suite OWASP ZAP Checkmarx Veracode Fortify SonarQube Snyk Prisma Cloud Wiz Tenable Aqua Security Trivy Postman SoapUI HIPAA HITRUST NIST Cybersecurity Framework FedRAMP FISMA FIPS OWASP Top 10 OWASP API Security Top 10 OWASP ASVS

5+ yrs exp Hybrid

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +4 54 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Maven Central PyPI SLSA Infrastructure as Code SSDLC

6+ yrs exp

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA +3 91 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC

6+ yrs exp

Save

Software Supply Chain Security Engineer

State Street

Quincy, MA 54 days ago

AppSec DevSecOps Software Supply Chain Security CI/CD Java Python .Net Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Infrastructure as Code Maven Central PyPI SLSA SSDLC

10+ yrs exp

Save

Application Security Engineer

State Street

Quincy, MA +3 91 days ago

Application Security DevSecOps Application Detection and Response SAST DAST SCA RASP WAAP API Security AWS Azure Kubernetes Terraform Ansible Python Java .NET Node.js CI/CD Infrastructure as Code OWASP Top 10 Incident Response Agile

6+ yrs exp

Save