Application Security Engineer - ADR
State StreetBase Salary
$120k - $203k/yr
Responsibilities
- Define and build the organization’s Application Detection and Response strategy within AppSec and DevSecOps programs.
- Deploy, onboard, integrate, and operationally support ADR platforms across enterprise applications and security tooling.
- Monitor and investigate application-layer security events, attack patterns, anomalous behavior, telemetry, logs, traces, and security events.
- Develop detection use cases, alerting logic, response workflows, dashboards, metrics, and executive-level security reporting.
- Partner with application, engineering, cloud security, and security operations teams to triage, prioritize, and remediate findings and threats.
- Integrate ADR capabilities with incident response processes and continuously improve monitoring and response effectiveness.
- Maintain ADR, AppSec, and DevSecOps documentation, standards, and operational procedures, and support internal and external audits.
- Provide technical leadership for strategic security projects from planning through implementation and operationalization.
Requirements
- Bachelor’s degree in information technology, computer science, or a related field with six years of relevant experience.
- Strong software development background with Java, .NET, Python, Node.js, or similar platforms.
- Experience with application security disciplines including SAST, DAST, SCA, API Security, Container Security, and secure SDLC practices.
- Experience implementing or supporting ADR, RASP, WAAP, API Security, threat detection, or related application security technologies.
- Knowledge of web, mobile, cloud-native, and API-based application attack techniques, including OWASP Top 10 and API security risks.
- Experience with Azure and AWS, application telemetry and security-event analysis, automation, orchestration, and infrastructure as code.
- Experience with Ansible, Terraform, Kubernetes, modern CI/CD, DevSecOps, software development, and secure SDLC practices.
- Current information security certifications such as CISSP, GCIH, GWAPT, Security+, or equivalent are preferred.
- Strong communication, prioritization, project-management, incident-management, and stakeholder-partnership skills are required.
Benefits
- Comprehensive retirement savings plan with 401(k) company match.
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
- Paid time off including vacation, sick leave, short-term disability, and family-care leave.
- Employee Assistance Program and eligibility for annual performance-based incentive compensation.
- Eligibility for certain tax-advantaged savings plans, inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
About State Street
At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion