AWS AppSec Engineer – SDLC & DevSecOps

System One; Lafayette (LA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

System One is seeking an AWS Application Security Analyst to support security initiatives within a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the SDLC.

The ideal candidate will have hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD security integration, AWS security, and container security.

Qualifications

• 5+ years of application security experience required.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience performing manual code reviews and security assessments.
• Strong threat modeling and risk assessment experience.
• Working knowledge of AWS security and securing apps in AWS.
• Experience with DevSecOps and CI/CD security integration.
• Experience with GitHub, Jenkins, or similar CI/CD platforms.
• Understanding of container security and related risks.
• Programming or code-review experience in Java, Python, JavaScript, or C#.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and risks.
• Conduct threat modeling and security risk assessments for new and existing applications.
• Collaborate with development teams to determine remediation approaches for findings.
• Utilize SAST, DAST, and SCA tools for security testing.
• Integrate security controls and automated testing into CI/CD pipelines.
• Evaluate security risks across AWS cloud and containerized environments.
• Apply secure coding practices and knowledge of protocols, encryption, and auth.
• Communicate vulnerabilities and remediation recommendations to tech stakeholders.

Skills

Application security experience

SAST

DAST

SCA

Threat modeling

DevSecOps

CI/CD

GitHub

Jenkins

Container security

Java

Python

JavaScript

C#

Secure coding

Communication

Education

Bachelor's degree

Tools

GitHub

Jenkins

Job description

System One is seeking an AWS Application Security Analyst to support security initiatives within a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the SDLC.

The ideal candidate will have hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD security integration, AWS security, and container security.