Application Security Engineer

State Street

. Build the DevSecOps and Application Security strategy .

Posted 9/16/2026full-timeHyderabad • IndiaSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in DevSecOps and Application Security, with a strong focus on integrating cybersecurity into agile practices and operationalizing security principles. Proficient in application security tooling, cloud environments, and automation tools to enhance security processes and documentation.

Highest-signal resume keywords

DevSecOps Strategy DevelopmentApplication Security ExperienceJava, .Net, Python, Node.js DevelopmentCISSP CertificationAutomation and Orchestration Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

DevSecOpsApplication SecuritySASTDASTSCAContainer Security ScanningAgile DevelopmentCloud EngineeringInfrastructure as CodeSoftware Development Life Cycle

Soft Skills

Excellent Communication SkillsProject ManagementPrioritization

Tools & Technologies

AzureAWSAnsibleTerraformKubernetesCI/CD

Certifications & Qualifications

CISSPSecurity+

Industry Keywords

CybersecurityCloud SecurityAgile PracticesDevOpsHybrid Cloud Environment

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityJavaJavaScriptKubernetesNode.jsPythonSDLCTerraform

About the role

Key responsibilities & impact

Build the DevSecOps and Application Security strategy
Integrate cybersecurity into organizational adoption and improvement of agile practices
Partner with engineering teams to implement and operationalize DevSecOps and AppSec principles and processes
Assist application teams with onboarding to adopted security tools and technologies
Work with vendors to troubleshoot platforms and integration issues
Assist development teams with triaging GenAI model security scanning and remediating vulnerabilities
Deliver and communicate dashboard reporting and metrics
Develop and maintain application security and DevSecOps documentation
Assist with audit processes and provide documentation to close audit findings
Continuously improve DevSecOps and application security processes and tools
Deliver tasks based on project objectives and technically support projects through completion

Requirements

What you’ll need

Bachelor’s degree in information technology (IT), computer science, or related field
8 to 12 years of relevant experience
Experience developing software using Java, .Net, Python, and Node.js
Experience with Azure and AWS
Extensive application security experience, including SAST, DAST, SCA, and container security scanning
Current information security certification, including CISSP
Experience with automation and orchestration tools such as Ansible, Terraform, or Kubernetes
Knowledge of Infrastructure as Code (IaC) principles
Experience automating deployment and management tasks in a hybrid cloud environment
Technical solutioning experience with Agile Development, DevOps, Cloud Engineering, System Hardening, DevSecOps, Cybersecurity, and Cloud Security
Excellent verbal and written communication skills
Ability to prioritize and manage several projects or priorities simultaneously
Experience in software development and SDLC
Experience with application security tooling and operations with modern CI/CD and DevSecOps practices
Experience partnering with development communities to adopt application security best practices and tooling
Security+ or other cybersecurity certification
Experience with Agile and Scrum practices
Ability to work from the base office location 4 days per week
Flexibility to support global stakeholders across multiple time zones

Benefits

Comp & perks

Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Vibrant employee networks
Flexible support for global stakeholders across multiple time zones