Lead Application Security & DevSecOps Analyst

Barclays; Hanover Township (IL); On-site; USD 175,000 - 225,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k) plan

Life insurance

Paid leave

Incentive award eligibility

Job summary

Barclays seeks a Lead Application Security Analyst in Whippany, NJ to lead evaluation, delivery and continuous enhancement of Application Security and DevSecOps capabilities. You will translate security data into actionable risk insights and collaborate with engineering and risk teams.

The role requires hands-on experience with SAST/SCA/DAST, API security, secure coding practices, and CI/CD integration across cloud-native environments. Strong communication with senior stakeholders is essential.

Qualifications

• Experience with SAST/SCA/DAST tools and remediation guidance.
• Proficiency in API security testing and vulnerability assessment.
• Hands-on secure coding practices across modern stacks.
• Ability to integrate security testing into CI/CD pipelines.
• Strong risk assessment and ability to communicate findings.

Responsibilities

• Lead evaluation, delivery and continuous enhancement of Application Security and DevSecOps capabilities.
• Translate security data into actionable risk insights for stakeholders.
• Collaborate with engineering, risk and governance to improve controls.
• Develop and maintain risk-based testing methodologies and reports.
• Guide teams on secure development and remediation strategies.

Skills

SAST/SCA/DAST tools

API security testing

Secure coding practices

CI/CD security integration

Threat modeling / risk assessment

Education

Bachelor's degree in Computer Science or related field

Tools

SAST tools

DAST tools

API testing tools

Job description

Barclays seeks a Lead Application Security Analyst in Whippany, NJ to lead evaluation, delivery and continuous enhancement of Application Security and DevSecOps capabilities. You will translate security data into actionable risk insights and collaborate with engineering and risk teams.

The role requires hands-on experience with SAST/SCA/DAST, API security, secure coding practices, and CI/CD integration across cloud-native environments. Strong communication with senior stakeholders is essential.