Application Security Engineer, ADR, AVP

About the role

Cyber Security Architecture & Engineering team at State Street builds and operates application security and detection capabilities across the enterprise. The Application Security Engineer, ADR, AVP designs, implements and supports ADR platforms, monitors application-layer threats, and partners with engineering and security teams to improve detection and response. Hybrid role based in Bangalore and Hyderabad, India, with 4 days onsite per week.

What you’ll do

• Define and build ADR strategy integrating runtime security monitoring
• Partner with engineering, security operations and cloud teams to deploy ADR platforms
• Lead onboarding, operational support and integration of ADR tools
• Monitor, analyze and investigate application security events and attack patterns
• Develop use cases, detection logic, alerts and response workflows
• Deliver security reporting, dashboards and executive summaries
• Maintain ADR, AppSec and DevSecOps documentation and standards
• Support audits with evidence and process adherence

What you’ll bring

• 11+ years of application security, DevSecOps, and cloud experience
• Strong software development background in Java, .NET, Python or Node.js
• Experience with Azure and AWS cloud platforms
• Hands‑on with SAST, DAST, SCA, API security and RASP technologies
• Developed detection logic, alerting and response workflows for application threats
• Automation/orchestration using Ansible, Terraform, Kubernetes
• Excellent communication with technical and executive audiences
• Ability to lead ADR strategy and cross‑team initiatives

Skills

Benefits

• Inclusive development opportunities
• Flexible work‑life support
• Paid volunteer days
• Employee networks and community programs

Education

Bachelor's degree in Computer Science or related field