Senior AI-Driven AppSec & DevSecOps Engineer

Cybersecurity Jobs; Boston (MA); On-site; USD 110,000 - 315,000; Full time

Benefits offered by this job

Annual discretionary bonuses

Benefits package

Job summary

Arrowstreet Capital is seeking a Senior Application Security Engineer to embed security controls across the software development lifecycle and CI/CD pipelines. The role emphasizes building a modern DevSecOps ecosystem, integrating AI-driven vulnerability analysis, and advancing software supply chain security to reduce risk and improve developer velocity.

You will lead threat modeling for AI-enabled systems, implement secure SDLC policies, and collaborate with development teams to remediate

Qualifications

• Experience in DevSecOps and secure SDLC practices.
• Experience building dashboards for risk indicators and trends.
• Hands-on collaboration with developers to remediate vulnerabilities.
• Familiarity with CI/CD platforms and source control tools.

Responsibilities

• Manage and improve pipeline security posture with a modern DevSecOps ecosystem.
• Modernize vulnerability management with AI-driven analysis mapping risk to business impact.
• Lead threat modeling and security reviews for AI-enabled systems.
• Define metrics and reporting to communicate security posture to tech teams and leadership.
• Drive security controls in CI/CD pipelines (SAST, DAST, SCA, secret detection, container scanning, API testing).
• Advance software supply chain security with SBOM adoption and third-party risk management.

Skills

DevSecOps

security engineering

threat modeling

leadership

communication

Tools

GitHub

GitLab

Azure DevOps

Jenkins

SAST

DAST

SCA

Job description

Arrowstreet Capital is seeking a Senior Application Security Engineer to embed security controls across the software development lifecycle and CI/CD pipelines. The role emphasizes building a modern DevSecOps ecosystem, integrating AI-driven vulnerability analysis, and advancing software supply chain security to reduce risk and improve developer velocity.

You will lead threat modeling for AI-enabled systems, implement secure SDLC policies, and collaborate with development teams to remediate