Senior Application Security Architect | DevSecOps & Cloud Security

Clear Street; New York (NY); On-site; USD 175,000 - 210,000; Full time

Benefits offered by this job

Company equity

401k matching

Gender neutral parental leave

Full medical insurance

Dental insurance

Vision insurance

Job summary

Clear Street is seeking an experienced Application Security Engineer to drive security across the product lifecycle, from source code to cloud deployment. You will own CI/CD security controls, partner with engineers to remediate vulnerabilities, and lead cloud security best practices in a fast-paced, DevSecOps environment.

You will build automation, maintain tooling, and contribute to threat modeling, incident response, and security documentation.

Qualifications

• 7+ years in a DevSecOps or cloud security role.
• Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins).
• Proficiency with at least one major cloud provider (AWS, Azure, or GCP).
• Familiarity with OWASP Top 10 and common vulnerability classes.

Responsibilities

• Own security controls within CI/CD pipelines (SAST, DAST, SCA, secrets detection).
• Identify and remediate vulnerabilities in application source code.
• Manage the vulnerability lifecycle: triage, prioritize by risk, track remediation.
• Lead cloud security efforts: IAM, network controls, storage security, workload protection.
• Maintain and tune security tooling (SAST/DAST, container security, dependency analysis).
• Build automation and AI-based tools to scale DevSecOps operations.
• Define secure IaC standards and enforce via policy-as-code.
• Participate in threat modeling and security design reviews for new features.
• Support incident response for application and cloud security events.
• Contribute to security docs, runbooks, and developer guidance.

Skills

DevSecOps

Application security

Cloud security

Scripting (Python/Bash)

Communication

Tools

GitHub Actions

GitLab CI

Jenkins

Semgrep

Snyk

Checkmarx

Veracode

Kubernetes

Job description

Clear Street is seeking an experienced Application Security Engineer to drive security across the product lifecycle, from source code to cloud deployment. You will own CI/CD security controls, partner with engineers to remediate vulnerabilities, and lead cloud security best practices in a fast-paced, DevSecOps environment.

You will build automation, maintain tooling, and contribute to threat modeling, incident response, and security documentation.