Senior AI-Driven AppSec Engineer

Edward Jones; St. Louis (MO); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) plan

Medical + prescription

Dental & vision

Short- & long-term disability

Life insurance

Employee Assistance Program

Paid holidays and vacation

Bonus potential & profit sharing

Job summary

Edward Jones is seeking an experienced Application Security Engineer to operate an AI-enabled harness that evaluates source code for security vulnerabilities throughout the Secure SDLC. You will partner with AppSec, DevSecOps, and platform teams to ensure reliable findings, actionable recommendations, and governance that meets financial-services controls.

Responsibilities include maintaining harness health, building observability dashboards, automating workflows, and ensuring evidence-quality

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or related field (or equivalent practical experience).
• 6+ years of experience in application security, secure software engineering, DevSecOps, or related cybersecurity engineering roles.
• Hands-on experience supporting security capabilities across CI/CD, source control, ticketing, artifact management, logging, and AppSec reporting workflows.
• Knowledge of secure code review, vulnerability triage, remediation validation, threat modeling, and secure SDLC practices.

Responsibilities

• Operate and maintain the AI secure-code evaluation harness for source code repositories and SDLC changes.
• Monitor harness health across ingestion, orchestration, model routing, and scanner integration.
• Build observability dashboards and alerts for run success, latency, and cost management.
• Troubleshoot CI/CD tooling, including Jenkins, GitHub, Jira/Azure DevOps, and AppSec scanners.
• Automate operational workflows with Python, shell scripts, APIs, and IaC patterns.
• Maintain runbooks, SOPs, and escalation paths.
• Support secure ingestion and handling of source code, artifacts, SBOMs, logs, and evidence packages.

Skills

Application security

DevSecOps

Python

Shell scripting

LLM governance

CI/CD

Jenkins

GitHub Actions

Observability

SBOMs

Education

Bachelor's degree

Tools

Jenkins

GitHub Actions

GitHub Enterprise

Jira/Azure DevOps

Job description

Edward Jones is seeking an experienced Application Security Engineer to operate an AI-enabled harness that evaluates source code for security vulnerabilities throughout the Secure SDLC. You will partner with AppSec, DevSecOps, and platform teams to ensure reliable findings, actionable recommendations, and governance that meets financial-services controls.

Responsibilities include maintaining harness health, building observability dashboards, automating workflows, and ensuring evidence-quality