AppSec Engineer: Shift-Left Security & CI/CD

Teradata Corporation (SE); Helena (MT); On-site; USD 102,000 - 153,000; Full time

Benefits offered by this job

Health care

Life and disability insurance

401(k) retirement savings

Time-off programs

Job summary

Teradata seeks an Application Security Engineer to secure applications across multiple codebases and cloud environments. You will triage findings from SAST, SCA, DAST, IaC, and containers, and deliver remediation guidance to development teams.

The role includes automating security in CI/CD with Go and integrating security into the Secure SDLC. You will assess web apps and APIs for OWASP Top Ten risks, apply OWASP ASVS/AISVS/SVPS standards, and mentor engineers while collaborating with Product

Qualifications

• Proficient in code security across Java, C/C++, Go, Python, or JS/TS.
• CI/CD integration of SAST/ SCA/ DAST/ IaC/ container scanning.
• Automate security processes with Go.
• Identify and remediate software supply chain risks.
• Evaluate security requirements for internal and third-party software.
• Evaluate new technologies for AppSec impact.
• Apply OWASP AI security standards for AI-generated code.
• Familiar with OWASP AISVS and Top 10 for AI/LLMs.
• Translate findings into plain-language summaries.
• Collaborate with Product Engineering to improve Secure SDLC.
• Deliver secure coding training and tooling.
• Mentor engineers on vulnerability remediation.
• Serve as AppSec SME.
• Make well-reasoned security trade-offs.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC, and container scans.
• Deliver actionable remediation guidance to development teams.
• Review code to identify vulnerabilities across multiple languages.
• Integrate and tune AppSec scanning in CI/CD.
• Assess web apps and APIs for OWASP Top Ten risks (2025).
• Apply OWASP ASVS, AISVS, SVPS standards to assessments.
• Evaluate AI-assisted development workflows for prompt injection risks.
• Analyze open-source dependencies for known vulnerabilities.
• Write automation scripts in Go to streamline security tasks.
• Review IaC configurations for security misconfigurations.
• Evaluate cloud environments (AWS, Azure, GCP) for AppSec risk.
• Communicate findings to technical and non-technical stakeholders.
• Support PCI-DSS and FedRAMP compliance discussions.

Skills

Code security analysis

SAST/DAST/IA C integration

Remediation guidance

Go scripting

Software supply chain risk

AppSec risk assessment

OWASP AI security standards

Plain-language reporting

Collaboration with Product Engineering

Security training

Mentoring engineers

SME for AppSec

Security decision making

Education

MS/BS in Electrical Engineering, Computer Science, IT

Advanced degree preferred

Job description

Teradata seeks an Application Security Engineer to secure applications across multiple codebases and cloud environments. You will triage findings from SAST, SCA, DAST, IaC, and containers, and deliver remediation guidance to development teams.

The role includes automating security in CI/CD with Go and integrating security into the Secure SDLC. You will assess web apps and APIs for OWASP Top Ten risks, apply OWASP ASVS/AISVS/SVPS standards, and mentor engineers while collaborating with Product