Senior Application Security Engineer: SDLC Innovator

Raymond James

Saint Petersburg (FL)

Hybrid

USD 130,000 - 185,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Raymond James is seeking a Lead Application Security Engineer to merge security into SDLC, assess risks across applications and APIs, and enable development teams to build resilient software at scale.

This role combines application security engineering, software security assessment, vulnerability analysis, secure development practices, and cybersecurity architecture. Hybrid work in St. Petersburg, FL.

Qualifications

Experience identifying and remediating application and API vulnerabilities (OWASP Top 10).
Strong automation and software engineering capability; production-quality code.
Ability to translate security findings into prioritized engineering actions.

Responsibilities

Lead application security engineering across web apps, APIs, and cloud-native services.
Embed security controls through the SDLC including design, development, and release.
Design and tune automated security testing in CI/CD (SAST, DAST, IAST, SCA).
Develop security automation using Python, PowerShell, JavaScript, and APIs.
Build workflows to manage findings across tools and teams.
Leverage AI-assisted vulnerability analysis to guide remediation.
Evaluate AI capabilities for accuracy, governance, and safety.
Perform manual and tool-assisted security assessments and provide remediation guidance.
Lead threat modeling and architecture risk reviews with stakeholders.
Mentor engineers and contribute to security strategy and roadmaps.