Application Security & DevSecOps Specialist

Barclays; Whippany (NJ); On-site; USD 125,000 - 170,000; Full time

Benefits offered by this job

Incentive award

Job summary

Barclays in Whippany, NJ is seeking an Application Security Analyst to advance application security and DevSecOps. You will run SAST/DAST/SCA, assess findings, and help embed security controls across the software development lifecycle.

You will collaborate with engineering and security teams, review API security, perform secure coding in Java/Spring/.NET/Python/JS, and produce metrics dashboards to inform risk decisions.

Qualifications

• Experience running SAST/SCA/DAST scans and triaging findings.
• Testing APIs and understanding common weaknesses in authentication, authorization, input validation, data exposure, and business logic.
• Applying secure coding knowledge in at least one development ecosystem and supporting security testing within CI/CD workflows
• Evaluating security data and producing operational metrics and dashboards

Responsibilities

• Identify vulnerabilities within bank IT systems using penetration testing tools and communicate key findings and remediation guidance to stakeholders.
• Collaborate with IT teams to identify emerging cyber-attack techniques and support penetration testing methodologies.
• Develop and maintain documents and reports for senior stakeholders on penetration test findings and remediation guidance.
• Collaborate with stakeholders to understand security requirements and controls in business processes to enhance security posture.
• Identify emerging vulnerabilities and develop testing methodologies and assurance activities.

Skills

SAST

SCA

DAST

API security

AI-assisted testing

CI/CD security

Secure coding

Security metrics

Job description

Barclays in Whippany, NJ is seeking an Application Security Analyst to advance application security and DevSecOps. You will run SAST/DAST/SCA, assess findings, and help embed security controls across the software development lifecycle.

You will collaborate with engineering and security teams, review API security, perform secure coding in Java/Spring/.NET/Python/JS, and produce metrics dashboards to inform risk decisions.