Senior AI-Driven AppSec Engineer

Edward Jones; St. Louis (MO); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k with match

Paid holidays

Job summary

Edward Jones in the United States is seeking an Application Security Engineer, Agentic Secure Code Harness Engineer, to operate and improve an AI-enabled AppSec harness that evaluates code for security vulnerabilities across the Secure SDLC. You will partner with AppSec, DevSecOps, platform engineering, AI governance and application teams.

The role emphasizes harness health, observability, reliability, troubleshooting, evidence capture, and day-to-day operability, with responsibilities across

Qualifications

• 6+ years in application security, secure software engineering, DevSecOps, or related roles.
• Experience supporting security capabilities across CI/CD, source control, ticketing, artifact management, logging, and AppSec reporting workflows.
• Familiarity with SAST, SCA, DAST, secrets scanning, API security testing, container security, and SBOMs.

Responsibilities

• Operate and maintain the AI secure-code evaluation harness for source code repositories and lifecycles.
• Monitor harness health, observability dashboards, and reporting across components.
• Automate operational workflows and ensure findings flow into developer workflows with context and remediation guidance.

Skills

CI/CD experience

Automation

Observability

Python scripting

Incident response

Education

Bachelor’s degree in Computer Science or related field

Tools

Jenkins

GitHub Actions

GitHub Enterprise

Jira/Azure DevOps

Job description

Edward Jones in the United States is seeking an Application Security Engineer, Agentic Secure Code Harness Engineer, to operate and improve an AI-enabled AppSec harness that evaluates code for security vulnerabilities across the Secure SDLC. You will partner with AppSec, DevSecOps, platform engineering, AI governance and application teams.

The role emphasizes harness health, observability, reliability, troubleshooting, evidence capture, and day-to-day operability, with responsibilities across