Lead App Security & DevSecOps Specialist

Barclays; Whippany (NJ); On-site; USD 175,000 - 225,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k) & life insurance

Paid leave

Incentive award

Job summary

Barclays leads the way in securing its technology landscape through expert application security leadership. You will guide evaluation, delivery and enhancement of App Security and DevSecOps, with specialist experience in SAST, SCA, DAST, API security and AI-assisted testing.

You will translate security findings into actionable risk insights, embed controls across the software development lifecycle, and partner with engineering, risk and governance teams to improve control effectiveness and

Qualifications

• Experience with one or more SAST/SCA/DAST tools and tuning policies.
• Experience assessing APIs and API vulnerabilities.
• Experience applying secure coding in Java/Spring, .NET, Go, Python or JavaScript/TypeScript.
• Experience integrating application security testing into CI/CD pipelines and cloud-native environments (containers, Kubernetes, IaC).
• Ability to analyze data, identify trends and produce leadership-ready risk insights.

Responsibilities

• Development and execution of assessments, audits and threat models; communicate findings to stakeholders.
• Collaborate with IT teams to identify new attack techniques and support pen testing methodologies.
• Develop reports for senior stakeholders with remediation guidance.
• Align security requirements with business processes to strengthen overall security posture.
• Identify emerging vulnerabilities and develop testing methodologies and assurance activities.

Skills

SAST

SCA

DAST

API security

DevSecOps

CI/CD integration

Threat modeling

Data analysis

Leadership/communication

Kubernetes

Tools

Java/Spring

.NET

Go

Python

JavaScript/TypeScript

Job description

Barclays leads the way in securing its technology landscape through expert application security leadership. You will guide evaluation, delivery and enhancement of App Security and DevSecOps, with specialist experience in SAST, SCA, DAST, API security and AI-assisted testing.

You will translate security findings into actionable risk insights, embed controls across the software development lifecycle, and partner with engineering, risk and governance teams to improve control effectiveness and