Application Security Engineer — Shift-Left & Automation

Teradata Corporation (SE); Carson City (NV); On-site; USD 102,000 - 153,000; Full time

Job summary

Teradata Information Security seeks an Application Security professional to secure the SDLC by automating security analyses, triaging findings, and guiding developers. You will review code across multiple languages, integrate SAST/SCA/DAST into pipelines, and assess cloud and infrastructure security for Teradata's applications.

Role emphasizes strong collaboration with Product Engineering, addressing AI-assisted development risks, and adherence to PCI-DSS and FedRAMP where applicable.

Qualifications

• Knowledge of core application security principles and common vulnerability classes, their root causes, and mitigations.
• MS/BS degree in Electrical Engineering, Computer Science, Information Technology, or related field; advanced degree highly preferred.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC, and container scanning tools to identify true positives and eliminate noise.
• Deliver clear, actionable remediation guidance to development teams for AppSec findings across the application portfolio.
• Perform code reviews and reason about vulnerabilities across Java, C/C++, Go, Python, and JavaScript/TypeScript codebases.
• Integrate and tune AppSec scanning tools within CI/CD pipelines to shift security left in the SDLC.
• Assess web applications and APIs for common vulnerability classes including the OWASP Top Ten (2025).
• Apply OWASP ASVS, AISVS, and SVPS standards to application security assessments and security requirement definitions.
• Review AI-assisted development workflows and evaluate agentic systems for risks such as prompt injection, excessive permissions, unsafe tool use, and insecure output handling.
• Investigate software supply chain risks by analyzing open-source dependencies for known vulnerabilities, suspicious packages, and dependency confusion exposures.
• Write and maintain automation scripts in Go to streamline security processes and tool integrations.
• Review and assess Infrastructure as Code configurations in Terraform, CloudFormation, Helm, and Ansible for security misconfigurations.
• Evaluate cloud environments across AWS, Azure, and/or Google Cloud for AppSec risk and misconfigurations.
• Communicate security findings and risk clearly to both technical and non-technical stakeholders.
• Support compliance activities related to PCI-DSS and FedRAMP as they intersect with application security.

Skills

AppSec principles

Security testing

Code review

CI/CD security

SAST/SCA/DAST

OWASP standards

Threat modeling

Education

MS/BS in CS/IT

Job description

Teradata Information Security seeks an Application Security professional to secure the SDLC by automating security analyses, triaging findings, and guiding developers. You will review code across multiple languages, integrate SAST/SCA/DAST into pipelines, and assess cloud and infrastructure security for Teradata's applications.

Role emphasizes strong collaboration with Product Engineering, addressing AI-assisted development risks, and adherence to PCI-DSS and FedRAMP where applicable.