Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOE8+ years experience building React and Node.js applications; backend with FastAPI, .NET, or Node.js; PostgreSQL and ORM experience; familiarity with security (DAST/SAST/SCA) and Azure DevOps.
WiproNYSE: WIT: Global technology services and consulting for digital transformation.
5+ YOE5+ years experience in application security including SAST/SCA/DAST, CI/CD integration, AI/LLM scanning, container and cloud knowledge, and programming with Java/Python/Groovy.
ToyotaNYSE: TM: Designs and manufactures vehicles and provides automotive financial services.
3+ YOE3-6 years in application security; experience with SAST/DAST/SCA; code review; CI/CD; cloud security; IaC; strong QA of web, APIs, and mobile apps.
PepsiCoNASDAQ: PEP: Global manufacturer and distributor of snacks and beverages.
3+ YOEBachelor's in CS/Engineering or related and 3+ years experience; application security, vulnerability management, cloud-native security, Python/Go, SAST/SCA/DAST, WAF, and CI/CD security experience.
OneMain FinancialNYSE: OMF: Provides personal loans and credit cards to nonprime consumers.
5+ YOEBachelor's degree,5+ years application security engineering experience,knowledge of SAST/DAST/SCA/IAST,API and supply-chain security,CI/CD and IAC integration,secure SDLC and remediation management.
SAST, DAST, SCA, IAST, container security, API security testing, software supply chain security, CI/CD, Infrastructure-as-Code (IAC), OWASP API Security Top 10
PepsiCoNASDAQ: PEP: Global food and beverage manufacturer and distributor.
3+ YOEBachelor's in CS/Engineering or equivalent,3+ years experience,proficiency with Python or Go,experience with SAST/SCA/DAST,WAF,policy-as-code (OPA/Sentinel),cloud security (AWS/Azure/GCP),and vulnerability management.
Information Protection Senior Advisor (Product Security – DevSecOps)
Plano or Bloomington or Austin or Morris Plains or Bloomfield or St. Louis
$125k-$208k/yrHybridFull Time
The Cigna GroupNYSE: CI: Provides health insurance and pharmacy benefit management services.
8+ YOE8+ years in cybersecurity/app or product security, experience automating security in CI/CD, hands-on SAST/DAST/SCA/MAST, cloud familiarity (AWS/Azure/GCP), scripting (Python/Java/Shell) and Agile experience.
Publicis GroupeEuronext Paris: PUB: Global communications, advertising, and digital transformation holding.
10+ YOEBS/MS in CS or similar,10+ years experience,software development and CI/CD experience,SAST/DAST/MAST/RAST/IAST and vulnerability management,OWASP/CWE knowledge,cloud and auth expertise,threat modeling and cryptography.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Bachelor's degree or equivalent; hands-on experience with application security tools (SAST/DAST/SCA) and OWASP vulnerabilities; familiarity with Burp Suite, CheckMarx, Veracode, SonarQube, Fortify and languages like Java/Python/C#; CI/CD and container security exposure; must be authorized to work in the US (no sponsorship).
CitiNYSE: C: Providing global banking, investment, and wealth management services.
6+ YOE6+ years in cybersecurity, penetration testing expertise, experience with Burp Suite, SAST/DAST, Claude Code, GH copilot; strong R&D mindset, code proficiency, and bachelor’s/master’s in CS or Cyber Security (or equivalent experience).
Burp Suite, SAST/DAST scanners, Claude Code, GH copilot, LLM
CitiNYSE: C: Global diversified financial services holding.
6+ YOE6+ years in cyber security; penetration testing across web, network, and binary; hands-on with Burp Suite, SAST/DAST scanners, Claude Code, GH copilot and exploit development; strong R&D mindset and code proficiency. Master's or Bachelor's in CS/Cyber Security (or equivalent experience).
Burp Suite, SAST/DAST scanners, Claude Code, GH copilot, LLM
Infor: Provides industry-specific cloud enterprise software for global businesses.
Leading application security at scale across cloud, AI, and modern SDLC; experience with cloud-native security, AI/ML security, secure SDLC, and modern security toolsets.
Microsoft Azure, AWS, OWASP Top 10, OWASP ASVS, OWASP LLM Top 10, SAST, DAST, IAST, SCA, ASPM, CSPM, SBOM, SLSA, IaC, Kubernetes, CI/CD, secrets scanning