Staff Engineer I – Application Security and Production Support Engineer

Western Alliance Bank; Darbydale (OH); In loco; USD 110.000 - 160.000; Tempo pieno

Descrizione del lavoro

Western Alliance Bank in Columbus, OH seeks a Staff Engineer I focused on Application Security and Production Support to own security findings, improve SDLC compliance, and drive secure delivery across services. You will partner with Engineering, DevOps, QA, and Product teams to manage SAST/DAST/SCA results, reduce tech debt, coordinate incident triage, and strengthen controls across deployments.

This role emphasizes ownership of security outcomes, production readiness, and operational health

Competenze

• 5+ years of related IT experience in app support or similar field.
• Bachelor’s degree in related field required.
• Strong problem-solving, troubleshooting and analytical skills.
• Experience supporting enterprise applications in production environments.
• Working knowledge of SDLC security practices and compliance.
• Experience with web apps, REST APIs, and integrations.

Mansioni

• Own application security findings (SAST/DAST/SCA) and remediation.
• Drive remediation of technical debt across applications, infra and pipelines.
• Coordinate production support activities including incident triage and RCA.
• Manage server lifecycle activities: upgrades, patching, EOL remediation.
• Own certificate and credential management: renewals and rotations.
• Support DevOps tasks, CI/CD pipelines and deployment readiness.

Conoscenze

Application security

Production support

SDLC security

Incident triage

Root cause analysis

CI/CD pipelines

Azure

Windows enterprise

SAST/DAST/SCA

DevOps collaboration

Formazione

Bachelor's degree

Strumenti

Git

Azure DevOps

Descrizione del lavoro

Job Title:

Staff Engineer I – Application Security and Production Support Engineer

Location:

OH – Columbus

What you’ll do:

• An experienced and proactive Application Security and Production Support person is sought to join a growing team. The ideal candidate brings technical judgment and operational discipline to manage application security findings, drive timely remediations, and ensure ongoing SDLC compliance. This role emphasizes ownership of security outcomes (including SAST, DAST, and SCA), proactive management of technical debt and enablement. The Application Security and Production Support person partners closely with engineering, DevOps, QA, and product stakeholders to improve security posture, operational stability, and delivery effectiveness.


• Own and manage application security findings, including SAST, DAST, and SCA results, ensuring timely remediation and ongoing SDLC compliance.


• Drive remediation of technical debt across applications, infrastructure, and pipelines to improve security, stability, and maintainability.


• Coordinate and execute production support activities, including incident triage, root cause analysis, and followthrough on corrective actions.


• Manage and oversee server lifecycle activities such as upgrades, patching, and endoflife remediation in partnership with infrastructure and platform teams.


• Own certificate and credential management, including renewals, rotations, and expiration risk mitigation.


• Support and execute DevOps and operational tasks related to CI/CD pipelines, build processes, and deployment readiness.


• Collaborate closely with engineering, DevOps, QA, and security partners to prioritize work, remove blockers, and drive secure delivery.


• Contribute to technical documentation, standards, and runbooks to improve operational consistency and team enablement.


• Proactively identify risks, gaps, and improvement opportunities related to application security, production readiness, and operational health.

What you’ll need:

• 5+ years of related experience in IT App Support, IT Development, IT Networking, or similar field.


• Bachelor’s degree in related field required.


• Strong problem-solving, troubleshooting, and analytical skills with attention to detail.


• Experience supporting enterprise applications, platforms, or technology services in a production environment.


• Working knowledge of application architectures, integrations, and deployment models.


• Familiarity with web applications, REST APIs, and application communication patterns.


• Experience managing and remediating application security findings, including SAST, DAST, SCA, or equivalent security assessment results.


• Experience with source control and development lifecycle tools such as Git, Azure DevOps, or similar platforms.


• Understanding of relational database concepts and basic query troubleshooting.


• Working knowledge of SDLC security practices, secure delivery principles, and compliance expectations.


• Experience supporting production applications or platforms, including incident triage, root cause analysis, remediation tracking, and operational risk reduction.


• Experience working within Windows-based enterprise environments, including lifecycle management, patching, upgrades, and operational support.


• Experience working with Azure services and environments, including cloud administration, application hosting, identity management, security controls, and operational support.


• Experience with identity, access, credential, certificate, or secrets management practices.


• Experience supporting DevOps workflows, release processes, CI/CD pipelines, deployment activities, or operational readiness activities.


• Experience operating within regulated enviro