Senior AppSec Engineer – AI-Driven Security Lead

Raymond James Financial, Inc.; Saint Petersburg (FL); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Raymond James Financial, Inc. is seeking a Senior Application Security Engineer to lead security across web, API, and cloud-native environments. The role emphasizes embedding controls in the SDLC, automating testing, and building secure patterns.

You will mentor teams and collaborate with developers, architects, and risk stakeholders in a hybrid, office-in-staff model at the St. Petersburg, FL location. Expect deep expertise in SAST/DAST/IAST/SCA, cloud security, CI/CD integrations, and secure

Qualifications

• Typically requires 3+ years in application security, product security, or secure software development.
• Experience automating security controls in CI/CD workflows.
• Proven ability to translate security risk into engineering actions.

Responsibilities

• Lead application security engineering across web apps, APIs, mobile apps, cloud-native services, containers, and platforms.
• Embed security controls throughout the SDLC from requirements to post-production monitoring.
• Design and tune automated security testing in CI/CD including SAST/DAST/IAST/ SCA and container/image scanning.
• Develop reusable automation and security-as-code using Python, PowerShell, JavaScript, and shell scripts.
• Build workflows to manage vulnerability findings across tools and teams.
• Leverage AI-assisted analysis to summarize evidence and guide remediation.
• Perform manual and tool-assisted security assessments with actionable remediation guidance.
• Lead threat modeling and architecture risk reviews using abuse cases and data-flow analysis.
• Collaborate with engineers, architects, and risk stakeholders to translate requirements into solutions.
• Develop secure coding standards and guardrails aligned with OWASP guidance.
• Serve as escalation point for vulnerabilities and incidents; participate in on-call rotation.
• Mentor engineers, influence strategy, and stay current with attack techniques and AI risks.

Skills

Application security

SAST

DAST

IAST

SCA

CI/CD

Automation

Python

PowerShell

JavaScript/TypeScript

Go

Java

C#

Shell scripting

REST/GraphQL APIs

AI-assisted security tooling

Cloud security (Azure, AWS, GCP)

Kubernetes

DevSecOps

Threat modeling

Mentoring

Tools

GitHub

GitLab

Azure DevOps

Jenkins

Jira

Kubernetes

Cloud platforms

Job description

Raymond James Financial, Inc. is seeking a Senior Application Security Engineer to lead security across web, API, and cloud-native environments. The role emphasizes embedding controls in the SDLC, automating testing, and building secure patterns.

You will mentor teams and collaborate with developers, architects, and risk stakeholders in a hybrid, office-in-staff model at the St. Petersburg, FL location. Expect deep expertise in SAST/DAST/IAST/SCA, cloud security, CI/CD integrations, and secure