Lead App Security Engineer — AI-Driven SDLC & CI/CD

Raymond James Financial, Inc.; Florida; Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

Medical, dental, vision benefits

Life insurance

Retirement savings

Job summary

Raymond James is seeking a Lead Application Security Engineer to integrate security into the SDLC, assess application risk, and enable rapid, secure software delivery. You will automate controls across CI/CD, perform risk-based testing, and drive vulnerability remediation with AI-assisted analysis.

The role requires hands-on security engineering, threat modeling, and collaboration with engineering teams across cloud-native environments. Hybrid work in St. Petersburg, FL region is expected.

Qualifications

• Experience identifying and remediating OWASP Top 10 vulnerabilities.
• Strong automation skills and production-grade coding.
• Ability to integrate security controls into CI/CD pipelines.

Responsibilities

• Lead application security across web apps, APIs, and cloud-native services.
• Design and govern automated security testing in CI/CD.
• Mentor engineers and translate security risk into actionable fixes.

Skills

Python

CI/CD

AI-assisted security tooling

Threat modeling

Cloud security

Education

Bachelor’s degree in CS/SE/Cybersecurity

5+ years application security experience

Tools

SAST

DAST

IAST

SCA

API testing

Secrets detection

IaC scanning

Container image scanning

Job description

Raymond James is seeking a Lead Application Security Engineer to integrate security into the SDLC, assess application risk, and enable rapid, secure software delivery. You will automate controls across CI/CD, perform risk-based testing, and drive vulnerability remediation with AI-assisted analysis.

The role requires hands-on security engineering, threat modeling, and collaboration with engineering teams across cloud-native environments. Hybrid work in St. Petersburg, FL region is expected.