Application Security Engineer - Agentic Harness
Core
Design, implement, and support DevSecOps and Application Security strategies to integrate cybersecurity into agile software development lifecycles and CI/CD pipelines.
Role type
Senior IC Application Security Engineer (DevSecOps)
Builds
Secure software delivery pipelines, automated security tooling, and remediation workflows for application vulnerabilities.
Domain
Financial Services / Application Security / DevSecOps
Required skills
Application Security (AppSec), DevSecOps, Secure Software Development Lifecycle (SSDLC), CI/CD automation, SAST, SCA, DAST, Container Security, Cloud Engineering (Azure/AWS), Infrastructure as Code (IaC), Agile Development, System Hardening
Preferred skills
Software development (Java, .Net, Python, Node.js), Automation/Orchestration (Ansible, Terraform, Kubernetes), Technical solutioning, Influencing without authority
Technologies
Azure, AWS, Ansible, Terraform, Kubernetes, SAST tools, SCA tools, DAST tools, CI/CD platforms
Responsibilities
Build DevSecOps & AppSec strategy; Partner with engineering leads to implement security principles; Assist teams with onboarding to security tools and troubleshooting; Triage and remediate SAST/SCA vulnerabilities; Deliver security reporting via dashboards and metrics; Develop and maintain security documentation; Support audit processes; Continuously improve security processes and tools.
Seniority
Senior, hands-on IC