Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join our team to enhance application security and implement DevSecOps strategies.
- Company: State Street, a global leader in financial services and cybersecurity.
- Benefits: Flexible work-life balance, paid volunteer days, and inclusive development opportunities.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: Experience in software development and application security; eagerness to learn.
- Other info: Dynamic environment with opportunities for career growth and collaboration.
The predicted salary is between 43200 - 72000 £ per year.
The State Street Cyber Security Architecture & Engineering team is seeking an accomplished professional with proven expertise in Application Security (AppSec) and DevSecOps. The ideal candidate will have hands-on experience in application security, build, and release management, secure software development lifecycle (SSDLC), and the automation of security processes within CI/CD pipelines. Familiarity with general automation practices is essential. The ideal candidate will show eagerness to learn and grow in all aspects of technical solutioning and will design, implement, and support agile solutions and processes leveraged by a large number of applications hosted in our environment.
What you will be responsible for:
- Help build our DevSecOps & AppSec Strategy to integrate cybersecurity into the organizational adoption and improvement of agile practices.
- Partner with Engineering teams to implement and operationalize DevSecOps, and AppSec principles and processes.
- Assist application teams with onboarding to the adopted security tools/technologies; working with vendors to troubleshoot the platform and issues related to such integrations.
- Assist development community to triage Static Application Security Testing (SAST) vulnerabilities, and partner to remediate the application security vulnerabilities.
- Deliver and communicate reporting via dashboard, and metrics.
- Develop and maintain application security and DevSecOps documentation.
- Assist in the audit processes and provide relevant documentation to close Audit findings.
- Work with teams to continuously improve DevSecOps, & Application Security processes and tools.
- Deliver tasks based on project objectives; technically support projects through to completion.
What we value:
- Experience developing software in technologies such as Java, .Net, Python, and Node.js etc.
- Experience in cloud technologies such as Azure and AWS.
- Extensive experience in application security space including SAST, DAST, SCA and Container security scanning.
- Current information security certification, including Certified Information Systems Security Professional (CISSP).
- Experience with automation and orchestration tools, such as Ansible, Terraform, or Kubernetes, is valuable.
- Knowledge of Infrastructure as Code (IaC) principles and experience in automating deployment and management tasks in a hybrid cloud environment is beneficial.
- Proven technical solutioning experience with current and emerging technologies including, but not limited to: Agile Development, DevOps, Cloud Engineering, System Hardening, DevSecOps, Cybersecurity, Cloud Security.
- Excellent verbal and written communication skills across internal and external organizations.
- Ability to prioritize and manage several projects or priorities simultaneously.
Education & Preferred Qualifications:
- Bachelor's degree in information technology (IT), computer science, or related field with 6 years of relevant experience.
- Experience in software development and software development lifecycle (SDLC).
- Experience with application security tooling and its operations with modern CI/CD, and DevSecOps best practices.
- Experience partnering with Dev community to influence without authority to adopt application security best practices, and tooling.
- Security+ or other cybersecurity security certification.
- Experience with Agile and scrum practices.
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Application Security Programmer-Engineer - Vice President employer: State Street Corporation
Contact Detail:
State Street Corporation Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Application Security Programmer-Engineer - Vice President
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work at State Street or similar companies. A friendly chat can sometimes lead to insider info about job openings or even a referral.
✨Tip Number 2
Prepare for interviews by brushing up on your technical skills and understanding of AppSec and DevSecOps principles. We recommend practising common interview questions and scenarios related to application security to show you’re ready to tackle real-world challenges.
✨Tip Number 3
Don’t underestimate the power of follow-ups! After an interview, send a quick thank-you email to express your appreciation for the opportunity. It keeps you fresh in their minds and shows your enthusiasm for the role.
✨Tip Number 4
Check out our website for the latest job openings and apply directly through there. It’s a great way to ensure your application gets noticed, and we love seeing candidates who are proactive about their job search!
We think you need these skills to ace Application Security Programmer-Engineer - Vice President
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in AppSec and DevSecOps. We want to see how your skills align with the role, so don’t hold back on showcasing your relevant projects!
Showcase Your Technical Skills: Don’t forget to mention your hands-on experience with technologies like Java, .Net, or Python. We’re keen on seeing your familiarity with cloud platforms like Azure and AWS, so include any relevant projects or certifications.
Communicate Clearly: Your written communication skills are crucial for this role. Make sure your application is clear and concise, reflecting your ability to convey complex ideas simply. We appreciate a well-structured application!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it’s super easy to do!
How to prepare for a job interview at State Street Corporation
✨Know Your Stuff
Make sure you brush up on your application security knowledge, especially around SAST, DAST, and CI/CD processes. Be ready to discuss your hands-on experience with these tools and how you've integrated them into agile practices.
✨Show Your Automation Skills
Since automation is key in this role, be prepared to talk about your experience with tools like Ansible, Terraform, or Kubernetes. Share specific examples of how you've automated security processes in previous projects.
✨Communicate Clearly
Excellent communication skills are a must. Practice explaining complex technical concepts in simple terms, as you'll need to partner with various teams. Think of examples where you've successfully communicated security practices to non-technical stakeholders.
✨Be Ready to Collaborate
This role involves working closely with engineering teams. Prepare to discuss how you've influenced teams to adopt security best practices without direct authority. Highlight any experiences where collaboration led to successful outcomes.
