Senior Application Security Engineer - AI‑Driven SDLC Leader

raymondjames; Saint Petersburg (FL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Job summary

Raymond James in Saint Petersburg, FL, seeks a Lead Application Security Engineer to be a hands-on technical leader integrating security across the SDLC and enabling development teams to deliver resilient software.

The role combines application security engineering, vulnerability analysis, and cybersecurity architecture. You will build automated security controls in CI/CD, perform threat modeling, and responsibly apply AI-assisted techniques to accelerate discovery and remediation.

Qualifications

• Knowledge, Skills, and Abilities: Demonstrated expertise identifying, validating, explaining, and remediating application and API vulnerabilities, including vulnerability classes represented in the OWASP Top 10.

Responsibilities

• Lead application security engineering activities across web applications, APIs, mobile applications, cloud-native services, containers, and supporting platforms.
• Embed security controls throughout the software development lifecycle (SDLC), including requirements, architecture, design, development, build, test, release, and post-production monitoring.
• Design, implement, tune, and govern automated security testing in CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), interactive application security testing (IAST), software composition analysis (SCA), secrets detection, infrastructure-as-code scanning, container image scanning, API security testing, and mobile application testing.
• Develop reusable automation, integrations, and security-as-code using Python, PowerShell, JavaScript, shell scripting, APIs, webhooks, and pipeline platforms to reduce manual effort and improve control coverage.
• Build automated workflows that normalize, correlate, enrich, deduplicate, prioritize, ticket, route, retest, and close application vulnerability findings across security tools and engineering systems.
• Leverage AI-assisted application vulnerability analysis to summarize evidence, identify code-to-vulnerability relationships, propose test cases, prioritize likely exploit paths, explain findings to developers, and draft remediation guidance.

Job description

Raymond James in Saint Petersburg, FL, seeks a Lead Application Security Engineer to be a hands-on technical leader integrating security across the SDLC and enabling development teams to deliver resilient software.

The role combines application security engineering, vulnerability analysis, and cybersecurity architecture. You will build automated security controls in CI/CD, perform threat modeling, and responsibly apply AI-assisted techniques to accelerate discovery and remediation.