Senior Security Engineer: Secure SDLC & Cloud

Edward Jones; St. Louis (MO); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401k and retirement benefits

Paid holidays and vacation

Employee Assistance Program

Job summary

Edward Jones is seeking a skilled security engineer to partner with software and risk teams. The role focuses on reducing application and software supply chain risk across the SDLC, turning security findings into actionable controls in code, CI/CD, and production.

You will mentor engineers, triage vulnerabilities, and drive remediation with measurable evidence, working across Tempe, AZ and St. Louis, MO offices in a hybrid setup.

Qualifications

• Experience securing web apps, APIs, microservices and cloud-native systems.
• Hands-on secure code review, vulnerability triage, and tooling integration.
• Knowledge of IAM/OAuth2/OpenID Connect and TLS.

Responsibilities

• Provide security guidance for web apps, APIs, cloud-native services, and CI/CD workflows.
• Engineer scalable SAST, SCA, DAST, secret, IaC, container, and API security controls.
• Automate risk-based checks and evidence workflows with policy-as-code.

Skills

OWASP Top 10

SAST tooling

SCA tooling

CI/CD security

GitHub Actions

Education

Bachelor's degree in CS

Tools

JFrog

Dynatrace

Traceable

GitHub Advanced Security

Job description

Edward Jones is seeking a skilled security engineer to partner with software and risk teams. The role focuses on reducing application and software supply chain risk across the SDLC, turning security findings into actionable controls in code, CI/CD, and production.

You will mentor engineers, triage vulnerabilities, and drive remediation with measurable evidence, working across Tempe, AZ and St. Louis, MO offices in a hybrid setup.