Application Security & DevSecOps Engineer

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision insurance

Paid time off (PTO)

Employee Assistance Program

Incentive compensation

Job summary

State Street Corporation seeks an accomplished cybersecurity professional focused on Application Security (AppSec) and DevSecOps. The role emphasizes building and operationalizing security within CI/CD pipelines, SSDLC, and automation across a large application portfolio.

The opportunity involves collaborating with Engineering to embed DevSecOps and AppSec practices, onboarding teams to security tools, triaging security testing, delivering dashboards, and supporting audits.

Qualifications

• Bachelor’s degree in information technology (IT), computer science, or related field with 6 years of relevant experience.
• Experience in software development and software development lifecycle (SDLC).
• Experience with application security tooling and its operations with modern CI/CD, and DevSecOps best practices.
• Experience partnering with Dev community to influence without authority to adopt application security best practices, and tooling.
• Security+ or other cybersecurity certification.
• Experience with Agile and scrum practices.

Responsibilities

• Help build DevSecOps and AppSec strategy to integrate cybersecurity into agile practices.
• Partner with Engineering teams to implement and operationalize DevSecOps, and AppSec principles and processes.
• Assist application teams with onboarding to security tools/technologies; work with vendors to troubleshoot the platform and issues related to such integrations.
• Assist development community to triage Dynamic Application Security Testing (DAST), API Security testing, and Container scanning vulnerabilities, and partner to remediate the vulnerabilities.
• Deliver and communicate reporting via dashboard, and metrics.
• Develop and maintain application security and DevSecOps documentation.
• Assist in the audit processes and provide relevant documentation to close Audit findings.
• Work with teams to continuously improve DevSecOps, & Application Security processes and tools.
• Deliver tasks based on project objectives; technically support projects through to completion.

Skills

AppSec

DevSecOps

CI/CD

SSDLC

Automation

Azure

AWS

CISSP

Ansible

Terraform

Kubernetes

Education

Bachelor’s degree in IT / CS or related field

Tools

Ansible

Terraform

Kubernetes

Job description

State Street Corporation seeks an accomplished cybersecurity professional focused on Application Security (AppSec) and DevSecOps. The role emphasizes building and operationalizing security within CI/CD pipelines, SSDLC, and automation across a large application portfolio.

The opportunity involves collaborating with Engineering to embed DevSecOps and AppSec practices, onboarding teams to security tools, triaging security testing, delivering dashboards, and supporting audits.