DevSecOps & Application Security Engineer

STATE STREET CORPORATION

Quincy (MA)

On-site

USD 90,000 - 158,000

Full time

2 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

401K plan

Medical insurance

Paid time off

Job summary

STATE STREET CORPORATION seeks a seasoned security architect to lead Application Security (AppSec) and DevSecOps across our software ecosystem in Massachusetts. You will design and implement SSDLC, automate security in CI/CD, and drive secure deployment practices in a large enterprise environment.

You will collaborate with engineering teams, triage vulnerabilities (SAST/DAST/SCA), develop dashboards, and maintain comprehensive security documentation while helping close audit findings and improve

Qualifications

Bachelor’s degree in IT/CS with 6 years of relevant experience.
Experience with application security tooling and modern CI/CD, and DevSecOps best practices.
Security+ or other cybersecurity certification.
Experience partnering with Dev community to influence security practices and tooling.

Responsibilities

Help build DevSecOps & AppSec Strategy to integrate cybersecurity into agile practices.
Partner with Engineering teams to create, implement, and apply DevSecOps and AppSec principles.
Onboard application teams to security tools/technologies and troubleshoot integrations.
Triage SAST/DAST/SCA vulnerabilities and remediate vulnerabilities.
Deliver and communicate reporting via dashboards and metrics.
Develop and maintain application security and DevSecOps documentation.
Assist in audit processes and close audit findings.
Continuously improve DevSecOps and AppSec processes and tools.