Application Security Engineer — Secure SDLC & AI Risk

Teradata Corporation (SE); Nashville (TN); On-site; USD 102,000 - 153,000; Full time

Job summary

Teradata is seeking an Application Security Engineer to integrate security across the SDLC, automate scans, and guide developers toward secure coding practices. You will analyze findings from SAST, DAST, SCA, and IaC tools, and provide remediation guidance across Java, C/C++, Go, Python, and JavaScript/TypeScript.

You'll tune security tooling in CI/CD pipelines, assess cloud environments (AWS/Azure/GCP) for risk, review infrastructure configurations, and mentor engineers on vulnerability

Qualifications

• Experience integrating security testing into CI/CD pipelines.
• Ability to read and reason about code in Java, C/C++, Go, Python, or JavaScript/TypeScript.
• Experience with SAST, SCA, DAST, IaC and container scanning tools.
• Ability to translate findings into plain-language remediation guidance.
• Knowledge of OWASP ASVS, AISVS, SVPS and AI security standards.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC, and container scanning tools.
• Deliver remediation guidance to development teams across multiple codebases.
• Review code for vulnerabilities in Java, C/C++, Go, Python, and JavaScript/TypeScript.
• Tune and integrate AppSec scanning tools within CI/CD pipelines.
• Assess web apps and APIs for OWASP Top Ten (2025) and related risks.
• Review Infrastructure as Code configurations (Terraform, CloudFormation, Helm, Ansible) for misconfigurations.
• Evaluate cloud environments (AWS, Azure, GCP) for AppSec risk.
• Mentor engineers on secure coding and vulnerability remediation.

Skills

AppSec

CI/CD security

SAST/SCA/DAST

Secure coding

Go scripting

Dependency risk management

AI security

LLMs security

Threat modeling

Code review

Education

MS/BS in Computer Science / Electrical Engineering / IT or related field

Tools

Terraform

CloudFormation

Helm

Ansible

Go

Job description

Teradata is seeking an Application Security Engineer to integrate security across the SDLC, automate scans, and guide developers toward secure coding practices. You will analyze findings from SAST, DAST, SCA, and IaC tools, and provide remediation guidance across Java, C/C++, Go, Python, and JavaScript/TypeScript.

You'll tune security tooling in CI/CD pipelines, assess cloud environments (AWS/Azure/GCP) for risk, review infrastructure configurations, and mentor engineers on vulnerability