Application Security Engineer — DevSecOps & WAF

Stellantis; Auburn (AL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Comprehensive health & well-being

Generous PTO

Retirement savings plan

Income protection & insurance

Car lease program

Family building benefits

Growth & giving back

Job summary

Stellantis is seeking an Application Security engineer to identify, analyze, and mitigate vulnerabilities across the SDLC. This role supports a Shift Left security approach within DevSecOps, ensuring secure coding practices and automation in CI/CD.

The candidate will perform SAST/DAST/IAST, lead remediation, and collaborate with development teams to implement security controls and policies. On-site in Auburn Hills, MI.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years hands-on application security, security testing, and DevSecOps experience.
• Strong understanding of web/mobile architectures, SDLC, and secure coding practices.

Responsibilities

• Perform security testing (SAST/DAST/IAST, mobile security) across SDLC.
• Analyze vulnerabilities and recommend secure coding fixes.
• Lead remediation and drive closure in CI/CD pipelines.
• Lead WAF deployments and implement security controls.
• Provide remediation guidance and training to development teams.

Skills

Security testing

Secure coding

Communication

Threat modeling

Education

Bachelor's degree in CS/IT

Tools

Jenkins

GitLab

GitHub Actions

TeamCity

Checkmarx

Burp Suite

AWS WAF

Azure/AWS/GCP

Job description

Stellantis is seeking an Application Security engineer to identify, analyze, and mitigate vulnerabilities across the SDLC. This role supports a Shift Left security approach within DevSecOps, ensuring secure coding practices and automation in CI/CD.

The candidate will perform SAST/DAST/IAST, lead remediation, and collaborate with development teams to implement security controls and policies. On-site in Auburn Hills, MI.