Application Security Engineer
State Street
full-time
Posted on:
Location Type: Office
Location: Quincy • Massachusetts • New Jersey • United States
Visit company websiteExplore more
Salary
💰 $120,000 - $202,500 per year
About the role
- Help build DevSecOps & AppSec Strategy
- Partner with Engineering teams to implement DevSecOps and AppSec principles
- Assist application teams with onboarding security tools
- Triage GenAI models security scanning and remediate vulnerabilities
- Deliver and communicate reporting via dashboard and metrics
- Develop and maintain application security and DevSecOps documentation
- Assist in audit processes and provide documentation for closing findings
- Continuously improve DevSecOps and application security processes and tools
- Provide technical support for projects through to completion
Requirements
- 6 years of relevant experience
- Experience developing software in technologies such as Java, .Net, Python, and Node.js
- Experience in cloud technologies such as Azure and AWS
- Extensive experience in application security including SAST, DAST, SCA, and Container security scanning
- Current information security certification, e.g., CISSP
- Experience with automation tools like Ansible, Terraform, or Kubernetes
- Knowledge of Infrastructure as Code (IaC)
- Experience with Agile and scrum practices
Benefits
- 401K with company match
- Basic life, medical, dental, vision coverage
- Long-term disability insurance
- Paid-time off including vacation and sick leave
- Employee Assistance Program
- Incentive compensation for performance-based awards
- Eligibility for tax advantaged savings plans
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Java.NetPythonNode.jsSASTDASTSCAContainer security scanningInfrastructure as Code (IaC)Agile
Soft Skills
communicationcollaborationproblem-solvingtechnical supportdocumentation
Certifications
CISSP