DevSecOps & Application Security Engineer

State Street; Clifton (NJ); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical/dental/vision insurance

Paid time off

Job summary

State Street is seeking a seasoned Cyber Security professional focused on Application Security (AppSec) and DevSecOps. The role emphasizes hands‑on security in software development, build and release management, SSDLC, and automating security within CI/CD pipelines across a large multi‑application environment.

The ideal candidate will collaborate with Engineering to operationalize DevSecOps and AppSec, triage security findings, and produce dashboards and documentation.

Qualifications

• Bachelor's degree in IT/CS or related field.
• 6+ years of relevant experience in software development and SDLC.
• Experience with application security tooling in modern CI/CD and DevSecOps.
• Security+ or CISSP certification preferred.
• Experience with Agile and Scrum practices.

Responsibilities

• Help build DevSecOps & AppSec strategy to integrate cybersecurity into agile practices.
• Partner with Engineering teams to implement and operationalize DevSecOps and AppSec principles.
• Assist application teams with onboarding to security tools and troubleshoot integrations.
• Triage DAST, API security, and container scanning vulnerabilities; remediate issues.
• Deliver and communicate reporting via dashboard and metrics.
• Develop and maintain AppSec and DevSecOps documentation.
• Assist in audit processes and close findings with documentation.
• Improve DevSecOps, AppSec processes and tools across teams.
• Deliver tasks based on project objectives and support projects to completion.

Skills

Java

.NET

Python

Node.js

DevSecOps

CI/CD

SSDLC

Agile

Cloud Engineering

Cybersecurity

Education

Bachelor's degree in IT/CS or related field

Tools

Ansible

Terraform

Kubernetes

Job description

State Street is seeking a seasoned Cyber Security professional focused on Application Security (AppSec) and DevSecOps. The role emphasizes hands‑on security in software development, build and release management, SSDLC, and automating security within CI/CD pipelines across a large multi‑application environment.

The ideal candidate will collaborate with Engineering to operationalize DevSecOps and AppSec, triage security findings, and produce dashboards and documentation.