DevSecOps & AppSec Engineer

State Street; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision benefits

Paid time off

Job summary

State Street is seeking a skilled professional for the Cyber Security Architecture & Engineering team with strong AppSec and DevSecOps expertise. You will drive security integration in CI/CD, assist with SSDLC, and automate security workflows across numerous applications hosted in our environment.

The role emphasizes hands-on security tooling, cloud familiarity (Azure/AWS), and collaboration with engineering to mature DevSecOps practices within an agile framework.

Qualifications

• Hands-on experience in application security, build, and release management.
• SSDLC and automation of security within CI/CD pipelines.
• Strong knowledge of DevSecOps practices and automation tooling.
• Experience with cloud platforms (Azure/AWS) and modern software practices.

Responsibilities

• Help build DevSecOps & AppSec strategy across agile practices.
• Partner with Engineering to implement DevSecOps and AppSec principles.
• Onboard development teams to security tools and troubleshoot integrations.
• Triage DAST, API Security, and Container scanning vulnerabilities and assist remediation.

Skills

AppSec

DevSecOps

Cloud technologies

CI/CD automation

Automation tooling

Communication skills

Education

Bachelor's degree in IT/CS

Tools

Ansible

Terraform

Kubernetes

Job description

State Street is seeking a skilled professional for the Cyber Security Architecture & Engineering team with strong AppSec and DevSecOps expertise. You will drive security integration in CI/CD, assist with SSDLC, and automate security workflows across numerous applications hosted in our environment.

The role emphasizes hands-on security tooling, cloud familiarity (Azure/AWS), and collaboration with engineering to mature DevSecOps practices within an agile framework.