AppSec Engineer: DevSecOps Specialist

State Street; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Job summary

State Street is seeking an experienced professional in Massachusetts to lead Application Security (AppSec) and DevSecOps within its Cyber Security Architecture & Engineering group. You will drive SSDLC, automate security in CI/CD, and partner with engineering to embed security into agile development across many applications.

The role demands hands-on AppSec tooling, cloud awareness (Azure/AWS), and strong communication to report metrics and guide risk decisions.

Qualifications

• Bachelor’s degree in IT or CS with 6 years of relevant experience.
• Experience with application security tooling and its operations with modern CI/CD, and DevSecOps best practices.
• Security+ or CISSP or equivalent certification.

Responsibilities

• Help build DevSecOps & AppSec strategy to integrate cybersecurity into agile practices.
• Partner with Engineering leads to apply DevSecOps and AppSec principles.
• Assist on-boarding of application teams to security tools/technologies and troubleshoot integrations.
• Triangulate SAST/DAST vulnerabilities and partner to remediate security issues.
• Deliver and communicate reporting via dashboards and metrics.
• Develop and maintain AppSec and DevSecOps documentation.
• Support audit processes with relevant documentation.
• Improve DevSecOps and AppSec processes and tooling across teams.
• Deliver tasks aligned with project objectives and provide technical support through completion.

Skills

Java

.Net

Python

Node.js

Azure

AWS

SAST

DAST

SCA

Container security

CISSP

Ansible

Terraform

Kubernetes

IaC

Agile Dev/DevOps

Cybersecurity

Cloud Security

Communication skills

multi-project prioritization

Education

Bachelor’s degree in information technology (IT), computer science, or related field

Tools

Ansible

Terraform

Kubernetes

Job description

State Street is seeking an experienced professional in Massachusetts to lead Application Security (AppSec) and DevSecOps within its Cyber Security Architecture & Engineering group. You will drive SSDLC, automate security in CI/CD, and partner with engineering to embed security into agile development across many applications.

The role demands hands-on AppSec tooling, cloud awareness (Azure/AWS), and strong communication to report metrics and guide risk decisions.