Application Security Engineer, ADR - Assistant Vice President
State Street11 hours ago
Hyderābād, IndiaStaff+
Responsibilities
- Define and build the organization's Application Detection and Response strategy and integrate runtime application security monitoring into AppSec and DevSecOps programs.
- Partner with Engineering, Security Operations, Cloud Security, and Application Development teams to implement ADR technologies and processes.
- Lead deployment, onboarding, integration, and operational support of ADR platforms across enterprise applications.
- Monitor, analyze, and investigate application-layer security events, attack patterns, anomalous behavior, and malicious activity.
- Develop detection use cases, detection logic, alerting mechanisms, and response workflows.
- Collaborate with application teams to triage, prioritize, and remediate security findings, threats, and attack indicators.
- Integrate ADR platforms with incident response processes and produce security reporting, dashboards, metrics, and executive summaries.
- Maintain ADR, AppSec, and DevSecOps documentation, standards, and operational procedures.
- Support internal and external audits with application security monitoring evidence and documentation.
- Provide technical leadership for strategic security projects through planning, implementation, and operationalization.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, or a related discipline.
- 14+ years of relevant combined experience across development, CI/CD, software supply chain security, and application security.
- Strong software development background with Java, .NET, Python, Node.js, or similar platforms.
- Experience with Azure and AWS cloud technologies.
- Experience with SAST, DAST, SCA, API Security, Container Security, and Secure SDLC practices.
- Experience implementing or supporting ADR, RASP, WAAP, API Security, threat detection, or related application security technologies.
- Understanding of attacks against web, mobile, cloud-native, and API-based applications, including OWASP Top 10 and API security risks.
- Experience analyzing application telemetry, logs, traces, and security events to investigate incidents.
- Experience with application security tooling, modern CI/CD, DevSecOps practices, and partnering with development teams to adopt security practices.
- Experience with Ansible, Terraform, Kubernetes, and Infrastructure as Code practices.
- Strong communication, prioritization, and project and incident management abilities.
- Current certifications such as CISSP, GCIH, GWAPT, or Security+ are highly desirable.
Benefits
- Hybrid work arrangement with an expectation of working from the base office location four days per week.
- Standard business hours with flexibility to support global stakeholders across multiple time zones.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.