Application Security Engineer (Middle) (Pereira)

About the Role

We are looking for a Middle Application Security Engineer to execute hands‑on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program.

You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams.

The role requires 35 years of combined software engineering and AppSec experience.

What You Will Do

• Write and maintain the scripts necessary to integrate security gates such as SAST, DAST, and SCA into CI/CD pipelines.
• Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts.
• Assist in coding and deploying automated hardened baselines and secure codin...