Vanguard: Global investment management and financial services provider.
Requires a related undergraduate degree or equivalent experience, strong DAST deployment and CI/CD integration experience, application security expertise, and familiarity with NIST, OWASP, and MITRE.
Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOE8+ years experience building React and Node.js applications; backend with FastAPI, .NET, or Node.js; PostgreSQL and ORM experience; familiarity with security (DAST/SAST/SCA) and Azure DevOps.
WiproNYSE: WIT: Global technology services and consulting for digital transformation.
5+ YOE5+ years experience in application security including SAST/SCA/DAST, CI/CD integration, AI/LLM scanning, container and cloud knowledge, and programming with Java/Python/Groovy.
Charlotte or Chandler or Irving or Minneapolis or Canada
$100k-$163k/yrHybridFull Time
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
4+ YOE4+ years of information security engineering or equivalent experience; expertise in application security, SAST, DAST, SCA, IaC, CI/CD, OWASP, MITRE frameworks, SSDLC, and security tooling.
ToyotaNYSE: TM: Designs and manufactures vehicles and provides automotive financial services.
3+ YOE3-6 years in application security; experience with SAST/DAST/SCA; code review; CI/CD; cloud security; IaC; strong QA of web, APIs, and mobile apps.
EquinixNASDAQ: EQIX: Global provider of data center and digital infrastructure services.
8+ YOEApplication security or DevSecOps experience, CI/CD and cloud security knowledge, infrastructure-as-code skills, and familiarity with SAST, SCA, DAST, threat modeling, OWASP, NIST, and secure development practices.
PepsiCoNASDAQ: PEP: Global manufacturer and distributor of snacks and beverages.
3+ YOEBachelor's in CS/Engineering or related and 3+ years experience; application security, vulnerability management, cloud-native security, Python/Go, SAST/SCA/DAST, WAF, and CI/CD security experience.
PepsiCoNASDAQ: PEP: Global food and beverage manufacturer and distributor.
3+ YOEBachelor's in CS/Engineering or equivalent,3+ years experience,proficiency with Python or Go,experience with SAST/SCA/DAST,WAF,policy-as-code (OPA/Sentinel),cloud security (AWS/Azure/GCP),and vulnerability management.
Information Protection Senior Advisor (Product Security – DevSecOps)
Plano or Bloomington or Austin or Morris Plains or Bloomfield or St. Louis
$125k-$208k/yrHybridFull Time
The Cigna GroupNYSE: CI: Provides health insurance and pharmacy benefit management services.
8+ YOE8+ years in cybersecurity/app or product security, experience automating security in CI/CD, hands-on SAST/DAST/SCA/MAST, cloud familiarity (AWS/Azure/GCP), scripting (Python/Java/Shell) and Agile experience.
Publicis GroupeEuronext Paris: PUB: Global communications, advertising, and digital transformation holding.
10+ YOEBS/MS in CS or similar,10+ years experience,software development and CI/CD experience,SAST/DAST/MAST/RAST/IAST and vulnerability management,OWASP/CWE knowledge,cloud and auth expertise,threat modeling and cryptography.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
CitiNYSE: C: Providing global banking, investment, and wealth management services.
6+ YOE6+ years in cybersecurity, penetration testing expertise, experience with Burp Suite, SAST/DAST, Claude Code, GH copilot; strong R&D mindset, code proficiency, and bachelor’s/master’s in CS or Cyber Security (or equivalent experience).
Burp Suite, SAST/DAST scanners, Claude Code, GH copilot, LLM
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Experience designing and implementing CI/CD (GitHub Actions, Jenkins), GitOps (ArgoCD), DevSecOps (SAST/DAST, dependency scanning), deployments on AWS/GCP, and ALM tooling (Jira); Bachelor's degree or equivalent experience; US work authorization required.
CitiNYSE: C: Global diversified financial services holding.
6+ YOE6+ years in cyber security; penetration testing across web, network, and binary; hands-on with Burp Suite, SAST/DAST scanners, Claude Code, GH copilot and exploit development; strong R&D mindset and code proficiency. Master's or Bachelor's in CS/Cyber Security (or equivalent experience).
Burp Suite, SAST/DAST scanners, Claude Code, GH copilot, LLM