AppSec & DevSecOps Specialist

Stellantis; Auburn Hills (MI); On-site; USD 110,000 - 140,000; Full time

Job summary

Stellantis in Auburn Hills, MI seeks an on-site Application Security Engineer to harden software across the SDLC. You will run SAST/DAST/IAST, lead remediation efforts, and collaborate with DevOps and development teams to embed secure coding practices.

You will deploy and optimize WAF policies, participate in threat modeling, and train teams on secure development and testing techniques, with a strong focus on cross-functional enablement.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years of hands-on experience in application security, security testing, and DevSecOps.
• Strong understanding of web/mobile APIs, SDLC, and modern languages (Java, C#, Python).
• Experience with SAST, DAST, IAST, SCA, and mobile security testing tools.
• Secure code review in Java/C#/Python and development background (web/mobile).
• Familiarity with OWASP Top 10 and security frameworks (NIST, ISO 27001, NIST SSDF).
• WAF technologies (Akamai, Cloudflare, AWS WAF, Azure Front Door).
• Cloud platforms (AWS, Azure, GCP) and containers (Docker, Kubernetes).
• Programming/scripting knowledge: Java, JavaScript, SQL, HTML; Python, Bash preferred.

Responsibilities

• Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
• Analyze vulnerabilities and recommend secure coding fixes
• Demonstrate vulnerabilities to development teams
• Drive remediation efforts to closure
• Lead WAF deployment and security policy enforcement
• Integrate security controls into CI/CD pipelines
• Collaborate with development, platform, and supplier teams to enable secure coding
• Develop training materials and provide remediation guidance
• Conduct security assessments and track risks, milestones, deliverables, and status updates

Skills

Application security

DevSecOps

Security testing

Threat modeling

Communication

Education

Bachelor's degree in CS/IT or related field

Tools

Jenkins

GitHub Actions

Checkmarx

Burp Suite

GitHub Advanced Security

Job description

Stellantis in Auburn Hills, MI seeks an on-site Application Security Engineer to harden software across the SDLC. You will run SAST/DAST/IAST, lead remediation efforts, and collaborate with DevOps and development teams to embed secure coding practices.

You will deploy and optimize WAF policies, participate in threat modeling, and train teams on secure development and testing techniques, with a strong focus on cross-functional enablement.