Senior Application Security Engineer – AI-Driven SDLC

Worky; Saint Petersburg (FL); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Raymond James is seeking a Lead Application Security Engineer to integrate security into the software development lifecycle, assess application/API risk, and enable teams to deliver resilient software at scale.

The role combines security engineering, threat modeling, and automation across CI/CD pipelines, with hands-on responsibilities in vulnerability analysis and remediation guidance. Hybrid work with in-office days in St. Petersburg, FL.

Qualifications

• Demonstrated expertise identifying, validating, explaining, and remediating application and API vulnerabilities per OWASP Top 10 and API Top 10.
• Advanced understanding of authentication, authorization, session management, cryptography, input handling, and modern client/server attack surfaces.
• Hands-on with SAST, DAST, IAST, SCA, API testing, secrets detection, container scanning, IaC scanning, and pentest tools.

Responsibilities

• Lead application security engineering activities across web apps, APIs, mobile apps, cloud-native services, containers, and supporting platforms.
• Embed security controls throughout the SDLC from requirements to post-production monitoring.
• Design, implement, and govern automated security testing in CI/CD pipelines (SAST/DAST/IAST/SCA).
• Develop security automation using Python, PowerShell, JavaScript/TypeScript, and shell scripting.
• Build automated workflows to manage vulnerability findings across tools and teams.
• Evaluate AI-assisted security capabilities for accuracy, privacy, and governance.
• Perform manual and tool-assisted security assessments and provide remediation guidance.
• Lead threat modeling and architecture risk reviews with stakeholders.
• Mentor engineers, contribute to strategy, and stay current with AI-enabled risks.

Skills

OWASP Top 10

SAST/DAST/IAST

CI/CD security

Python scripting

Cloud security (Azure/AWS/GCP)

Threat modeling

AI-assisted security tooling

Threat/vulnerability analysis

Education

Bachelor’s degree in CS or related

Tools

GitHub

GitLab

Azure DevOps

Jira

Job description

Raymond James is seeking a Lead Application Security Engineer to integrate security into the software development lifecycle, assess application/API risk, and enable teams to deliver resilient software at scale.

The role combines security engineering, threat modeling, and automation across CI/CD pipelines, with hands-on responsibilities in vulnerability analysis and remediation guidance. Hybrid work with in-office days in St. Petersburg, FL.