Application Security Engineer

The State Street Cyber Security Architecture & Engineering team is seeking an accomplished professional with proven expertise in Application Security (AppSec) and DevSecOps. The ideal candidate will have hands-on experience in application security, build, and release management, secure software development lifecycle (SSDLC), and the automation of security processes within CI/CD pipelines. Familiarity with general automation practices is essential.

Requirements

• Experience developing software in technologies such as Java,.Net, Python, and Node.js etc.
• Experience in cloud technologies such as Azure and AWS.
• Extensive experience in application security space including SAST, DAST, SCA and Container security scanning.
• Current information security certification, including Certified Information Systems Security Professional (CISSP).
• Experience with automation and orchestration tools, such as Ansible, Terraform, or Kubernetes, is valuable.

Benefits

• 401k Matching
• Retirement Plan
• Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• Access to our Employee Assistance Program
• Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• Eligibility for certain tax advantaged savings plans