AppSec & DevSecOps Engineer

Talentify; Austin (TX); On-site; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a cyber security professional for the Architecture & Engineering team with strong AppSec and DevSecOps experience. You will help integrate cybersecurity into agile practices, partner with engineering to operationalize DevSecOps and AppSec, and support secure SDLC across a broad application portfolio.

You will triage DAST/API security and container scanning, automate security in CI/CD, and maintain documentation while contributing to audits and continuous improvements.

Qualifications

• Bachelor's degree in IT or CS with 6 years of relevant experience.
• Experience in software development and SDLC, with AppSec tooling operations in CI/CD.
• Security+ or CISSP or equivalent certification.
• Experience influencing Dev community to adopt AppSec practices.

Responsibilities

• Help build DevSecOps & AppSec strategy to integrate cybersecurity into agile practices.
• Partner with Engineering teams to implement and operationalize DevSecOps and AppSec.
• Assist onboarding to security tools and troubleshoot integrations with vendors.
• Triage DAST, API security testing, and container security; remediate vulnerabilities.
• Deliver and communicate reporting via dashboards and metrics.
• Develop and maintain AppSec and DevSecOps documentation.
• Assist in audit processes and close findings.
• Improve DevSecOps and AppSec processes and tools across teams.
• Deliver tasks and support projects through to completion.

Skills

Java

.NET

Python

Node.js

CI/CD automation

SSDLC

DevSecOps

Agile development

Strong communication

Education

Bachelor's degree in IT/CS

6 years of relevant experience

Security+ certification

Experience with SDLC

Tools

AWS

Azure

Ansible

Terraform

Kubernetes

SAST

DAST

SCA

Job description

State Street is seeking a cyber security professional for the Architecture & Engineering team with strong AppSec and DevSecOps experience. You will help integrate cybersecurity into agile practices, partner with engineering to operationalize DevSecOps and AppSec, and support secure SDLC across a broad application portfolio.

You will triage DAST/API security and container scanning, automate security in CI/CD, and maintain documentation while contributing to audits and continuous improvements.