Lead Application Security & DevSecOps Engineer

barclays; United States; On-site; USD 175,000 - 225,000; Full time

Job summary

Barclays is seeking a Lead Application Security Analyst to safeguard its technology landscape from emerging threats. You will lead evaluation, delivery and continuous enhancement of App Security and DevSecOps capabilities, focusing on SAST, SCA, DAST, API security and AI-assisted testing.

You will translate multi-layered security data into actionable risk insights, embed controls across the SDLC, and partner with engineering and risk teams to improve control effectiveness and standards

Qualifications

• Experience with security testing tools (SAST/DAST/SCA) and interpreting findings.
• Knowledge of API security testing, authz/authn, and API vulnerabilities.
• Proficiency in secure coding practices across at least one ecosystem (Java/Spring, .NET, Go, Python, JS/TS).
• Ability to integrate security testing into CI/CD pipelines and cloud-native environments.

Responsibilities

• Lead evaluation and delivery of Application Security and DevSecOps capabilities.
• Translate security-testing data into actionable risk insights for stakeholders.
• Collaborate with engineering, risk and governance teams to improve controls and standards.

Skills

SAST/DAST tools

API security testing

Secure coding

CI/CD integration

Data analytics

Stakeholder communication

Job description

Barclays is seeking a Lead Application Security Analyst to safeguard its technology landscape from emerging threats. You will lead evaluation, delivery and continuous enhancement of App Security and DevSecOps capabilities, focusing on SAST, SCA, DAST, API security and AI-assisted testing.

You will translate multi-layered security data into actionable risk insights, embed controls across the SDLC, and partner with engineering and risk teams to improve control effectiveness and standards