DevSecOps & AppSec Engineer

State Street; Boston (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Healthcare benefits

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a seasoned security architect to lead AppSec and DevSecOps across a large multi-application environment. You will design, implement and operate secure SDLC practices, automate security in CI/CD, and partner with engineering to embed security into development.

The role requires hands-on experience with Java/.Net/Python, cloud platforms (AWS/Azure), and security testing (SAST/DAST/SCA). Strong communication and a proactive mindset are essential for success.

Qualifications

• Bachelor’s degree in information IT/CS with 6 years of relevant experience.
• Experience with SDLC, DevSecOps, and modern CI/CD practices.
• Experience partnering with Dev community to adopt AppSec practices and tooling.
• Security+ or CISSP certification preferred.
• Experience with Agile and scrum practices.

Responsibilities

• Help build DevSecOps and AppSec strategy aligned with agile practices.
• Partner with Engineering to implement and operationalize DevSecOps and AppSec.
• Onboard application teams to security tools and troubleshoot integrations.
• Triages DAST, API Security testing, and container security findings and remediates.
• Deliver dashboards, metrics, and maintain AppSec/DevSecOps documentation.
• Support audit processes and close findings with required docs.
• Continuously improve DevSecOps and AppSec processes and tools.
• Deliver tasks on project objectives and support initiatives to completion.

Skills

Java

C#/.NET

Python

Node.js

Cloud (AWS/Azure)

AppSec experience

SAST/DAST/Container security

Education

Bachelor's degree in IT/CS

Security+ or CISSP

Tools

Ansible

Terraform

Kubernetes

CI/CD tooling

SCA tools

Job description

State Street is seeking a seasoned security architect to lead AppSec and DevSecOps across a large multi-application environment. You will design, implement and operate secure SDLC practices, automate security in CI/CD, and partner with engineering to embed security into development.

The role requires hands-on experience with Java/.Net/Python, cloud platforms (AWS/Azure), and security testing (SAST/DAST/SCA). Strong communication and a proactive mindset are essential for success.