Lead AppSec Engineer: API & DevSecOps Innovator

Barclays; Whippany (NJ); Vor Ort; USD 175.000 - 225.000; Vollzeit

Benefits dieser Stelle

Medical coverage

Dental coverage

Vision coverage

401(k)

Life insurance

Paid leave

Zusammenfassung

Barclays is seeking a Lead Application Security Analyst in Whippany, NJ, to drive secure software development across the enterprise. You will guide vulnerability management, API security and AI-assisted testing within CI/CD and cloud-native environments.

The role requires collaboration with engineering, risk and governance teams to elevate security standards and reduce risk. You will lead security testing strategy, interpret complex findings, and influence remediation priorities across

Qualifikationen

• Experience evaluating and tuning SAST/SCA/DAST tools, validating findings and guiding remediation.
• API security assessment using automated/manual techniques across auth, input validation, and common vulnerabilities.
• Secure coding in at least one ecosystem (Java/Spring, .NET, Go, Python or JS/TS).
• Integrating security testing into CI/CD pipelines and cloud-native environments (containers, Kubernetes, IaC).
• Use data-analysis to identify trends, prioritize risk, and create leadership-ready dashboards.

Aufgaben

• Lead evaluation, delivery and ongoing enhancement of Application Security and DevSecOps capabilities.
• Translate testing data into actionable risk insights for stakeholders.
• Embed controls across the software development lifecycle.
• Collaborate with engineering, risk and governance teams to improve controls and standards compliance.
• Develop testing strategies and challenge engineering teams on security risks.

Kenntnisse

SAST

SCA

DAST

API security

AI-assisted security testing

CI/CD integration

Kubernetes

Java/Spring

.NET

Go

Python

JavaScript/TypeScript

Tools

Jenkins

Git

Docker

Kubernetes

Jobbeschreibung

Barclays is seeking a Lead Application Security Analyst in Whippany, NJ, to drive secure software development across the enterprise. You will guide vulnerability management, API security and AI-assisted testing within CI/CD and cloud-native environments.

The role requires collaboration with engineering, risk and governance teams to elevate security standards and reduce risk. You will lead security testing strategy, interpret complex findings, and influence remediation priorities across