Application Security Engineer / Architect (DevSecOps)

<p><span style="font-size: 12pt;"><strong>About Clear Street:<br></strong></span></p> <div><span style="font-size: 12pt;">Clear Street’s mission is to give every sophisticated investor access to every asset, in every market, through a unified platform built for speed, transparency and scale.</span></div> <div><br><span style="font-size: 12pt;">We give our clients the technology, tools, and service once reserved for the largest institutions, rebuilt with modern infrastructure. Our single, cloud-native, end-to-end capital markets platform powers investor growth today and is transforming how they can interact with markets tomorrow.</span><br><br></div> <div><span style="font-size: 12pt;">For more information, visit&nbsp;<a href="https://clearstreet.io/" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://clearstreet.io&amp;source=gmail&amp;ust=1766166763873000&amp;usg=AOvVaw3GfALVHjsW8XaQSab-3CbX">https://clearstreet.io</a>.</span></div> <p class="p1"><span style="font-size: 12pt;"><strong>The Team:</strong></span></p> <p class="p1"><span style="font-size: 12pt;">As an application security engineer in the Security team, you’ll have the opportunity to problem solve, build and influence the security posture of our products and services across the product ecosystem.&nbsp; </span></p> <p class="p1"><span style="font-size: 12pt;">In this role specifically, you’ll be responsible for leading application security efforts with our engineers as part of the product development lifecycle at source code and cloud levels within DevSecOps, Vulnerability and other arenas.&nbsp;</span></p> <p><span style="font-size: 12pt;"><strong>Key Responsibilities:</strong></span></p> <p><span style="font-size: 12pt;">●&nbsp;&nbsp;&nbsp;&nbsp; Own security controls within CI/CD pipelines (SAST, DAST, SCA, secrets detection) and maintain pipeline-as-code tooling.</span><br><span style="font-size: 12pt;">●&nbsp;&nbsp;&nbsp;&nbsp; Work with engineers to identify and remediate vulnerabilities in application source code.</span><br><span style="font-size: 12pt;">●&nbsp;&nbsp;&nbsp;&nbsp; Manage the vulnerability lifecycle: triage findings from scanners, prioritize by risk, track remediation, and report on trends.</span><br><span style="font-size: 12pt;">●&nbsp;&nbsp;&nbsp;&nbsp; Lead cloud security efforts, work with engineering teams to enforce cloud security best practices