Senior AppSec Engineer

• Posted 10 days ago • Updated 8 hours ago

Contract W2

DRC Systems USA LLC

Fitment

Dice Job Match Score™

🛠️ Calibrating flux capacitors...

Job Details

Skills

Security
CISSP
DevSecOps

Summary

Mission:

This role is part of application security engineering team responsible for scanning code following the Wells Fargo established guidelines, secure development policies and procedures. This role will focus heavily on building and enhancing Software Composition Analysis (SCA) practice, help software developers at various Wells Fargo CIO teams to build faster, more securely, fine-tuning the tools, leveraging AI where possible to improve processes and services for optimal developer experience.

Must Haves:

5+ years of Information Security Engineering experience (Certification in information security (CISSP, CISM, CEH, etc.)
5+ years of experience as Application Security and DevSecOps engineer collaborating with developers to adopt and mature secure development
3+ year's experience in one or more of programming languages (.Net, C#, Java, RUST, C++)
Ability to write automation scripts in Python, PowerShell to support internal projects
Experience with CI/CD pipelines and related technologies (e.g., GitHub, Jenkins, Maven, Artifactory, Harness, Xray, Curation)
Good understanding of Secure Software development lifecycle
Strong knowledge of OWASP Top 10 or CWE
Detailed oriented - must be able to create documentation on different SCA procedures and tool configuration
Experience with Jira/Confluence
Experience with container security working with technologies like k8s and container technologies such as Openshift

Day to Day:

Managing security automation tools with main focus on SCA (i.e. Checkmarx One, BlackDuck) and other tools in the ecosystem along with supporting operational management with regularly scheduled upgrade of the tools
Interface with various internal teams ServiceNow AVR, DevOps and vulnerability operations team to make sure SCA vulnerabilities are identified and recorded per the application security policies and guidance
Collaborate with security architecture teams to design vulnerability management workflow, establish best practices and design guidance to optimize experience for developers
Adversarial security analysis on various application security requirements
Work with application security governance teams, risk & compliance partners on audits and recommending relevant policies
Collaborate with technology pipeline teams to improve code quality and vulnerability detection
Analyze, enhance, architect and support container security tools and platforms
Design and build advanced security solutions to strengthen open source software supply chains for effective automation and management

Plusses:

Familiarity and experience with AI tools supporting false positives reduction, auto code remediation, open-source threat intelligence would be preferred

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90718675
Position Id: 2026-1144
Posted 10 days ago

Company Info

About DRC Systems USA LLC

DRC Systems is a people-first organization

DRC Systems India Limited is a renowned name in the field of software development. Our journey began in 2012, with minimal resources in a small space with few technology enthusiast people. In a decade, we have grown into a team of over 300 people and offices located at three locations. The head office is located in GIFT City, Gandhinagar, a space for limitless opportunities, growth exposure, and access to world-class infrastructure.

Our team includes experts in many technological domains which empowers us to deliver top-notch solutions on-time to our clients. We offer a complete range of IT solutions which includes mobile app development, website development, AI and automation, enterprise solutions, cloud-based services, digital marketing services, and various others. We are technology partners for our clients, not just one-time solution providers. Our clientele includes institutions, enterprises, government agencies, international brands, industry leaders, and start-ups.

Go to company profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.