DevSecOps & AppSec Engineer — Shape Secure SDLC (Equity)

VulnU; Quincy (MA); Hybrid; USD 90,000 - 158,000; Full time

Benefits offered by this job

Retirement match

Equity

Job summary

State Street is seeking an Application Security Engineer to join the Cyber Security Architecture & Engineering team in Quincy, MA. The role focuses on integrating security into agile development, automating security in CI/CD, and leading AppSec initiatives across numerous applications.

The ideal candidate will have hands-on AppSec, SSDLC, and automation experience, with knowledge of SAST/DAST/SCA, cloud platforms (Azure/AWS), and both development and security tooling.

Qualifications

• Bachelor’s degree in information technology (IT), computer science, or related field with 6 years of relevant experience.
• Experience in software development and SDLC.
• Experience with application security tooling integrated with CI/CD and DevSecOps.
• Experience with one or more programming languages such as Java, .NET, Python.
• Security certification (CISSP or equivalent) preferred.
• Strong communication and collaboration with development teams.

Responsibilities

• Help build DevSecOps & AppSec strategy to integrate cybersecurity into agile practices.
• Partner with Engineering leads to apply DevSecOps and AppSec principles.
• Onboard development teams to security tools and troubleshoot integrations.
• Triage SAST/DAST/SCA vulnerabilities and coordinate remediation.
• Deliver dashboards and metrics reporting for security posture.
• Develop and maintain AppSec and DevSecOps documentation.
• Assist audits with relevant documentation and close findings.
• Improve DevSecOps, AppSec processes and tooling across teams.

Skills

Java

.NET

Python

Node.js

Cloud (Azure AWS)

SAST

DAST

SCA

Container security

CI/CD

DevSecOps

Kubernetes

Ansible

Terraform

IaC

Education

Bachelor’s degree in information technology (IT), computer science, or related field

Tools

Ansible

Terraform

Kubernetes

Job description

State Street is seeking an Application Security Engineer to join the Cyber Security Architecture & Engineering team in Quincy, MA. The role focuses on integrating security into agile development, automating security in CI/CD, and leading AppSec initiatives across numerous applications.

The ideal candidate will have hands-on AppSec, SSDLC, and automation experience, with knowledge of SAST/DAST/SCA, cloud platforms (Azure/AWS), and both development and security tooling.