Application Security Engineer / Architect (DevSecOps)

Posted 3 Hours Ago
Easy Apply
Be an Early Applicant
New York, NY, USA
Hybrid
175K-210K Annually
Senior level
Fintech • Software • Financial Services
Speed, Transparency and Scale for Sophisticated Investors™.
The Role
Lead application and cloud security within DevSecOps: own CI/CD security controls, manage vulnerability lifecycle, tune SAST/DAST/SCA tooling, enforce IaC and cloud security best practices, run threat modeling and security reviews, automate DevSecOps operations, and support incident response and security documentation.
Summary Generated by Built In

About Clear Street:

Clear Street’s mission is to give every sophisticated investor access to every asset, in every market, through a unified platform built for speed, transparency and scale.

We give our clients the technology, tools, and service once reserved for the largest institutions, rebuilt with modern infrastructure. Our single, cloud-native, end-to-end capital markets platform powers investor growth today and is transforming how they can interact with markets tomorrow.
For more information, visit https://clearstreet.io.

The Team:

As an application security engineer in the Security team, you’ll have the opportunity to problem solve, build and influence the security posture of our products and services across the product ecosystem. 

In this role specifically, you’ll be responsible for leading application security efforts with our engineers as part of the product development lifecycle at source code and cloud levels within DevSecOps, Vulnerability and other arenas. 

Key Responsibilities:

●     Own security controls within CI/CD pipelines (SAST, DAST, SCA, secrets detection) and maintain pipeline-as-code tooling.
●     Work with engineers to identify and remediate vulnerabilities in application source code.
●     Manage the vulnerability lifecycle: triage findings from scanners, prioritize by risk, track remediation, and report on trends.
●     Lead cloud security efforts, work with engineering teams to enforce cloud security best practices (IAM, network controls, storage security, workload protection).
●     Maintain and tune security tooling including SAST/DAST scanners, container security platforms, and dependency analysis tools.
●     Build automation and AI based tools to scale Devsecops operations.
●     Partner with Infra Engineering teams to define secure infrastructure-as-code (IaC) standards and enforce them via policy-as-code.
●     Participate in threat modeling sessions and security design reviews for new features and services.
●     Support incident response activities related to application and cloud security events.
●     Contribute to security documentation, runbooks, and developer-facing guidance.
Required Qualifications
●     7+ years of experience in a DevSecOps, application security, or cloud security engineering role.
●     Hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, or similar).
●     Proficiency with at least one major cloud provider (AWS, Azure, or GCP) and its native security services.
●     Experience with SAST/SCA tools (e.g., Semgrep, Snyk, Checkmarx, Veracode) and interpreting findings.
●     Working knowledge of container and Kubernetes security (image scanning, RBAC, network policies, admission control).
●     Scripting skills in Python, Bash, or similar for automation and tooling.
●     Familiarity with IaC tools (Terraform, CloudFormation, Pulumi) and policy frameworks (OPA/Rego, Checkov).
●     Understanding of OWASP Top 10, CWE, and common vulnerability classes.
●     Strong communication skills — able to explain security risk clearly to non-security audiences.

Your impact won't be measured by the number of servers you manage—it will be measured by how much faster and happier our engineers become.

The Base Salary Range is $175,000 - $210,000. These ranges are representative of the starting base salaries for this role at Clear Street. Which range a candidate fits into and where a candidate falls in the range will be based on job related factors such as relevant experience, skills, and location. These ranges represent Base Salary only, which is just one element of Clear Street's total compensation. The ranges stated do not include other factors of total compensation such as bonuses or equity.

At Clear Street, we offer competitive compensation packages, company equity, 401k matching, gender neutral parental leave, and full medical, dental and vision insurance. Our belief has always been that we are better as a business when we are all together in person. We are requiring employees to be in the office 4 days per week. In-office benefits include lunch stipends, fully stocked kitchens, happy hours, a great location, and amazing views.

Our top priority is our people. We’re continuously investing in a culture that promotes collaboration. We help each other through challenges and celebrate each other's successes. We believe that modern workplaces succeed by virtue of having high-performance workforces that are diverse — in ideas, in cultures, and in experiences. We put in the effort to make such a workplace a daily reality and are proud to be an equal opportunity employer.

#LI-Hybrid

Skills Required

  • 7+ years of experience in a DevSecOps, application security, or cloud security engineering role.
  • Hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, or similar).
  • Proficiency with at least one major cloud provider (AWS, Azure, or GCP) and its native security services.
  • Experience with SAST/SCA tools (e.g., Semgrep, Snyk, Checkmarx, Veracode) and interpreting findings.
  • Working knowledge of container and Kubernetes security (image scanning, RBAC, network policies, admission control).
  • Scripting skills in Python, Bash, or similar for automation and tooling.
  • Familiarity with IaC tools (Terraform, CloudFormation, Pulumi) and policy frameworks (OPA/Rego, Checkov).
  • Understanding of OWASP Top 10, CWE, and common vulnerability classes.
  • Strong communication skills; able to explain security risk clearly to non-security audiences.

What the Team is Saying

Jordan

Clear Street Compensation & Benefits Highlights

  • Healthcare Strength Health coverage across medical, dental, and vision is described as strong, with multiple notes on good coverage and reasonable costs. Feedback suggests FSA/HSA and mental-health options complement the core plans.
  • Wellbeing & Lifestyle Benefits Day-to-day perks such as commuter benefits, lunch stipends/free meals, stocked kitchens, and office events are consistently highlighted, especially in hub offices. Feedback suggests these tangible perks add meaningful everyday value.
  • Leave & Time Off Breadth Vacation, paid holidays, and sick time are portrayed as solid, with recent updates indicating well-regarded PTO. Feedback suggests time-off policies are workable and appreciated.

Clear Street Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: New York, NY
581 Employees
Year Founded: 2018

What We Do

Clear Street’s mission is to give every sophisticated investor access to every asset, in every market, through a unified platform built for speed, transparency and scale. We give our clients the technology, tools, and service once reserved for the largest institutions, rebuilt with modern infrastructure. Our single, cloud-native, end-to-end capital markets platform powers investor growth today and is transforming how they can interact with markets tomorrow. For more information, visit https://clearstreet.io.

Why Work With Us

Clear Street has thoughtfully cultivated a team that combines problem-solving engineers with financial industry experts across clearing platforms, compliance, and more. The company is focused on building a team that is motivated to tackle fintech innovation and create a collaborative work culture for everyone.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

Clear Street Offices

Hybrid Workspace

Employees engage in a combination of remote and on-site work.

We are requiring employees to be in the office 4 days per week. In-office benefits include lunch stipends, fully stocked kitchens, happy hours, a great location, and amazing views.

Typical time on-site: 4 days a week
HQNew York, NY
Charlotte Amalie, USVI
Chicago, IL
Del Mar, CA
London, GB
Tampa, Florida
Tel Aviv-Yafo, IL
Toronto, Ontario
Umeå, SE
West Palm Beach, Florida
Learn more

Similar Jobs

Clear Street Logo Clear Street

Associate Director - Digital Operations

Fintech • Software • Financial Services
Easy Apply
Hybrid
New York, NY, USA
581 Employees
175K-225K Annually

Clear Street Logo Clear Street

Associate - Surveillance

Fintech • Software • Financial Services
Easy Apply
Hybrid
New York, NY, USA
581 Employees
95K-110K Annually

Clear Street Logo Clear Street

Software Engineer

Fintech • Software • Financial Services
Easy Apply
Hybrid
New York, NY, USA
581 Employees
170K-220K Annually

Clear Street Logo Clear Street

Administrative Assistant

Fintech • Software • Financial Services
Easy Apply
Hybrid
New York, NY, USA
581 Employees
75K-85K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account