SMBC GroupNew York Stock Exchange: SMFG: Provides global banking, investment, securities, and consumer finance services.
5+ YOE5+ years in application security with SAST/DAST experience, code review ability, vulnerability remediation, CI/CD integration, container security, and use of Jira/Confluence.
Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
Charlotte or Chandler or Irving or Minneapolis or Canada
$100k-$163k/yrHybridFull Time
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
4+ YOE4+ years of information security engineering or equivalent experience; expertise in application security, SAST, DAST, SCA, IaC, CI/CD, OWASP, MITRE frameworks, SSDLC, and security tooling.
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yrOnsiteFull Time
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years pentesting/application security experience, ability to perform manual web and mobile assessments, develop PoCs, conduct code reviews, use DAST/SAST, and strong programming/debugging and threat analysis skills.
DAST, SAST, Frida, UNIX, LINUX, TCP/IP, Web APIs, SBOM, CVE, CWE, Port Swigger, LLM security
United RentalsNYSE: URI: Rents and sells industrial and construction equipment globally.
7+ YOERequires 7+ years in application security/DevSecOps, experience building pipeline security (SAST/DAST/SCA/secrets/containers), CI/CD tool integration, Cisco AI Defense and AI security, and proven cross-functional leadership.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
5+ YOERequires 5+ years of architecture and information security experience, threat modeling, architecture reviews, security assessments, SSDLC, secure coding, and cloud application, API, and modern architecture security.
OWASP Top 10, SAST, DAST, SCA, IaC, Kubernetes, Azure, AWS, Google Cloud, GitHub Copilot
PRA GroupNASDAQ: PRAA: Acquires and collects nonperforming loans for banks and creditors.
12+ YOE5+ Mgmt12+ years in information security with technical architecture and engineering depth; 5+ years leadership; cloud, IAM, application security, SIEM/XDR/SOAR, and 2+ years implementing AI/ML in security; Bachelor required, Masters preferred; security certifications preferred.
Charlotte or Irving or Chandler or Minneapolis or United States
$119k-$206k/yrHybridFull Time
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
5+ YOERequires 5+ years of information security engineering experience, AppSec expertise, tooling integration, CI/CD knowledge, leadership, regulated-environment experience, and strong written, verbal, and presentation skills.
Vanguard: Global investment management and financial services provider.
Requires a related undergraduate degree or equivalent experience, strong DAST deployment and CI/CD integration experience, application security expertise, and familiarity with NIST, OWASP, and MITRE.
Vanguard: Global investment management and financial services provider.
3+ YOERequires a bachelor's degree and 3–5+ years in software engineering, application security, DevSecOps, or security engineering, with Python or Java, APIs, automation, cloud-native applications, and security concepts.