AppSec Engineer: Secure SDLC for AI/Cloud Apps

Teradata Corporation (SE); Montpelier (VT); On-site; USD 1,016,000 - 1,525,000; Full time

Job summary

Teradata Corporation is seeking an Application Security Engineer to join our security team. You will analyze security findings across SAST/DAST/SCA and IaC, triage issues, and deliver remediation guidance to development teams across Java, C/C++, Go, Python, and JavaScript/TypeScript codebases.

You will integrate and tune security tools in CI/CD, review IaC security configurations, and assess cloud environments (AWS/Azure/GCP) for AppSec risk.

Qualifications

• Read and reason about code in Java, C/C++, Go, Python, or JavaScript/TypeScript to identify and address security issues.
• Integrate SAST, SCA, DAST, IaC, and Container scanning into CI/CD pipelines.
• Spot manual security processes and build automation to replace them.
• Write and maintain security automation scripts in Go.
• Identify and remediate software supply chain risks including malicious or compromised third-party packages, typosquatting, and dependency confusion attacks.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC, and container scanning tools to identify true positives and eliminate noise.
• Deliver clear, actionable remediation guidance to development teams for AppSec findings across the application portfolio.
• Perform code reviews and reason about vulnerabilities across Java, C/C++, Go, Python, and JavaScript/TypeScript codebases.
• Integrate and tune AppSec scanning tools within CI/CD pipelines to shift security left in the SDLC.
• Review and assess Infrastructure as Code configurations in Terraform, CloudFormation, Helm, and Ansible for security misconfigurations.
• Evaluate cloud environments across AWS, Azure, and/or Google Cloud for AppSec risk and misconfigurations.

Skills

Java

C/C++

Go

Python

JavaScript/TypeScript

Education

MS/BS in Electrical Engineering, Computer Science, Information Technology, or related field

Tools

SAST

SCA

DAST

IaC

Container scanning

Job description

Teradata Corporation is seeking an Application Security Engineer to join our security team. You will analyze security findings across SAST/DAST/SCA and IaC, triage issues, and deliver remediation guidance to development teams across Java, C/C++, Go, Python, and JavaScript/TypeScript codebases.

You will integrate and tune security tools in CI/CD, review IaC security configurations, and assess cloud environments (AWS/Azure/GCP) for AppSec risk.