Shift-Left AppSec Engineer - Automation & Cloud

Teradata Corporation (SE); Juneau (AK); On-site; USD 102,000 - 153,000; Full time

Job summary

Teradata Corporation (SE) is seeking an experienced Application Security Engineer to integrate and support security across the SDLC for a large portfolio of analytic applications. You will automate security findings, perform code reviews, and tune SAST/DAST/IaC tools in CI/CD to shift security left.

You will assess web apps, APIs, and AI-enabled workflows against OWASP standards, review dependencies for risks, and collaborate with Product Engineering to improve Secure SDLC practices while

Qualifications

• Proficient in analyzing code across Java, C/C++, Go, Python, and JavaScript/TypeScript to identify security issues.
• Experience integrating SAST, SCA, DAST, IaC, and container scanning into CI/CD pipelines.
• Ability to automate security processes with Go.
• Knowledge of OWASP ASVS, AISVS, SVPS and OWASP Top 10 for AI security.
• Experience reviewing supply chain risks in open-source dependencies.
• Ability to communicate security findings to non-technical stakeholders.
• Mentor developers on vulnerability remediation.

Responsibilities

• Analyze and triage findings from SAST, SCA, DAST, IaC and container scans.
• Provide remediation guidance to development teams for AppSec findings.
• Perform code reviews across Java, C/C++, Go, Python, and JavaScript/TypeScript.
• Integrate and tune AppSec tools within CI/CD pipelines.
• Assess web applications and APIs for OWASP Top Ten (2025).
• Review AI-assisted development workflows for prompt injection risks.
• Investigate software supply chain risks in open-source dependencies.
• Write automation scripts in Go to streamline security processes.

Skills

Java & JavaScript code reasoning

CI/CD security integration

Go scripting

Security automation

Dependency risk assessment

Threat modeling

Education

MS/BS in CS, EE, IT or related; advanced degree preferred

Tools

SAST tools

SCA

DAST

IaC scanners

Container scanners

Job description

Teradata Corporation (SE) is seeking an experienced Application Security Engineer to integrate and support security across the SDLC for a large portfolio of analytic applications. You will automate security findings, perform code reviews, and tune SAST/DAST/IaC tools in CI/CD to shift security left.

You will assess web apps, APIs, and AI-enabled workflows against OWASP standards, review dependencies for risks, and collaborate with Product Engineering to improve Secure SDLC practices while