AppSec Engineer: Secure Design, SAST/DAST & CI/CD

Intercontinental Exchange Holdings, Inc.; Jacksonville (FL); On-site; USD 110,000 - 140,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking an Application Security Engineer to safeguard ICE's software products.

You will analyze applications, perform code reviews, and drive secure design across the SDLC, collaborating with developers, QA, and management to remediate findings and improve security posture. Responsibilities include applying secure coding practices, maintaining security policies, and evaluating SAST/DAST tools, WAFs, and software composition controls while educating teams

Qualifications

• University degree in Computer Science, Engineering, MIS, CIS, or related discipline.
• Software engineering experience in Java, C++, .NET and/or related languages.
• Expert at deploying, configuring, and using SAST, DAST, and Software Composition in large environments.
• Experience designing solutions to integrate transparently with the CI/CD pipeline.
• Familiar with application development in large cloud environments.
• Interest in or exposure to AI and large language models (LLMs), including emerging security risks such as prompt injection, is a plus

Responsibilities

• Operate the Application Development Security Lifecycle from design review through automated and hands-on testing.
• Maintains and contributes to Application Development Security Policies and standards by keeping up with industry trends and publications from organizations such as NIST, OWASP, and SANS.
• Works with development teams to establish security requirements early in the SDLC and contributes security subject matter expertise during the development of new projects and releases.
• Focuses on automation while implementing, maintaining and integrating cutting-edge technologies to assess an application’s security with static code analyzers (SAST), dynamic testing (DAST) tools, software composition scanners, Web Application Firewall (WAF) and bug bounty programs.
• Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via training sessions, one-on-one education, Intranet blogs and other opportunities.
• Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.

Skills

Java

C++

.NET

CI/CD integration

Security testing

Education

University degree in Computer Science, Engineering, MIS, CIS, or related discipline

Tools

SAST

DAST

Software Composition

Job description

Intercontinental Exchange, Inc. is seeking an Application Security Engineer to safeguard ICE's software products.

You will analyze applications, perform code reviews, and drive secure design across the SDLC, collaborating with developers, QA, and management to remediate findings and improve security posture. Responsibilities include applying secure coding practices, maintaining security policies, and evaluating SAST/DAST tools, WAFs, and software composition controls while educating teams