28Stone

Security Engineer

• Coordinate and oversee application vulnerability remediation with engineering, DevOps, and product teams.
• Manage and track application onboarding into approved AppSec scanning tools, including SAST, DAST, and SCA tools.
• Monitor scan outputs, triage findings, and communicate risk-based remediation guidance.
• Support policy exception, waiver, and risk acceptance submissions in line with GRC standards.
• Plan, facilitate, and lead cross-functional remediation sessions with engineering teams, platform owners, and third-party vendors.
• Enforce secure coding and DevSecOps policy compliance and escalate non-compliance.
• Identify and manage orphaned or unowned applications within AppSec tooling.
• Develop, maintain, and present security and compliance dashboards.
• Document AppSec, DevSecOps, and GRC processes, controls, and operating procedures.
• Support internal audits, regulatory assessments, and external reviews by maintaining compliance evidence and risk documentation.
• Help financial institutions operate efficiently through custom software and financial infrastructure solutions as part of 28Stone, an IT consulting company specializing in capital markets technology.

Explore Information Systems Security Coordinator at 28Stone. Review requirements and application details.

Open roles

Information Systems Security Coordinator