AppSec & ADR Engineer - DevSecOps Focus

State Street

Quincy (MA)

On-site

USD 120,000 - 202,500

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

401K with company match

Insurance coverage

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a security professional to advance our ADR capabilities across enterprise applications. You will design and implement runtime protection and monitoring, working with development and security teams to strengthen the application security posture.

Responsibilities include leading ADR deployment, detecting threats, and delivering executive dashboards. The role requires strong AppSec expertise, cloud experience, and collaboration across stakeholders to improve detection and

Qualifications

Strong software development background across major languages (Java/.NET/Python).
Experience with cloud platforms (Azure/AWS).
Hands-on AppSec disciplines including SAST/DAST/SCA.
Experience implementing ADR, RASP, WAAP, API security, threat detection.
Knowledge of OWASP Top 10 and API security risks.
Familiarity with automation/orchestration (Ansible, Terraform, Kubernetes).
Excellent written and verbal communication across technical and executive audiences.
Experience with Agile and DevSecOps practices.

Responsibilities

Define ADR strategy and integrate runtime app security monitoring.
Collaborate with Engineering, Security Ops, Cloud Security, and Dev teams to operationalize ADR.
Lead deployment, onboarding, and support of ADR platforms and tooling.
Monitor and investigate application-layer security events and attacks.
Triage, prioritize, and remediate security findings with application teams.
Develop use cases, detection logic, alerts, and response workflows.
Integrate ADR with incident response processes.