AppSec Engineer II — Secure SDLC & DevSecOps

Federal Home Loan Bank of Des Moines; Des Moines (IA); Hybrid; USD 102,000 - 121,000; Full time

Benefits offered by this job

Hybrid work schedule

401(k) plan matching

Paid time off and holidays

Job summary

The Application Security Engineer II at Federal Home Loan Bank of Des Moines partners with software development and technology teams to embed security throughout the SDLC. This role performs security assessments, design reviews, DevSecOps initiatives, and vulnerability management to protect member data.

You will administer code and pipeline security tooling, secure IaC deployments, and provide guidance to developers.

Qualifications

• 3-5 years in Application Security, Information Security, DevSecOps, or related field.
• Experience performing application security assessments and validating remediation efforts.
• Experience with SDLC and working with development teams.

Responsibilities

• Administer code and pipeline security tooling (SAST, DAST, SCA, etc.).
• Maintain and enhance secure code training program.
• Integrate security controls into CI/CD pipelines and developer workflows.
• Provide security guidance to developers and stakeholders on architecture and design.

Skills

Application security

DevSecOps

SDLC

SAST/DAST/SA

CI/CD tooling

Vulnerability management

IaC security

REST APIs

Docker/Kubernetes

Secure coding

Education

Bachelor's or master's in CS/Cybersecurity/SE

Tools

Code scanning tools

Git

Pipeline automation tools

Job description

The Application Security Engineer II at Federal Home Loan Bank of Des Moines partners with software development and technology teams to embed security throughout the SDLC. This role performs security assessments, design reviews, DevSecOps initiatives, and vulnerability management to protect member data.

You will administer code and pipeline security tooling, secure IaC deployments, and provide guidance to developers.