Senior Application Security Engineer: SDLC Innovator

Raymond James; Saint Petersburg (FL); Hybrid; USD 130,000 - 185,000; Full time

Job summary

Raymond James is seeking a Lead Application Security Engineer to merge security into SDLC, assess risks across applications and APIs, and enable development teams to build resilient software at scale.

This role combines application security engineering, software security assessment, vulnerability analysis, secure development practices, and cybersecurity architecture. Hybrid work in St. Petersburg, FL.

Qualifications

• Experience identifying and remediating application and API vulnerabilities (OWASP Top 10).
• Strong automation and software engineering capability; production-quality code.
• Ability to translate security findings into prioritized engineering actions.

Responsibilities

• Lead application security engineering across web apps, APIs, and cloud-native services.
• Embed security controls through the SDLC including design, development, and release.
• Design and tune automated security testing in CI/CD (SAST, DAST, IAST, SCA).
• Develop security automation using Python, PowerShell, JavaScript, and APIs.
• Build workflows to manage findings across tools and teams.
• Leverage AI-assisted vulnerability analysis to guide remediation.
• Evaluate AI capabilities for accuracy, governance, and safety.
• Perform manual and tool-assisted security assessments and provide remediation guidance.
• Lead threat modeling and architecture risk reviews with stakeholders.
• Mentor engineers and contribute to security strategy and roadmaps.

Skills

SAST

DAST

IAST

SCA

API testing

Python

CI/CD tooling

GitHub

GitLab

Azure DevOps

Education

Bachelor’s degree in CS/CE/IT

5+ years in application security

Tools

Jenkins

Jira

Container scanning

Job description

Raymond James is seeking a Lead Application Security Engineer to merge security into SDLC, assess risks across applications and APIs, and enable development teams to build resilient software at scale.

This role combines application security engineering, software security assessment, vulnerability analysis, secure development practices, and cybersecurity architecture. Hybrid work in St. Petersburg, FL.