> Markdown version of [/jobs/ext/2069884-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2069884-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** Teradata - **Location:** Boston, MA, United States - **Salary:** $127,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Business Analytics Applications, Application Portfolio Management, Build Automation, Microsoft Azure, C++ (Programming Language), Static Program Analysis, Code Review, Cyber Security, DevOps, Python (Programming Language), Open Source Technology, Open Web Application Security, PCI Data Security Standards, Systems Development Life Cycle, Ansible, Secure Coding, Software Engineering, Teradata SQL, TypeScript, Software Vulnerability Management, Web Applications, Google Cloud, Cloud Platform System, Large Language Models, Software Security, Cloudformation, Information Technology, Tenable Nessus, Terraform, Static Application Security Testing, Golang, Dynamic Application Security Testing - **Published:** August 15, 2026 - **Apply:** https://www.bostonjobsite.com/job.asp?id=3354553627&tx=FR2724FFG&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * Knowledge of core application security principles, common security vulnerability classes, their root causes, and mitigations * MS/BS degree in Electrical Engineering, Computer Science, Information Technology, or related field. Advanced degree highly preferred ## Description * The Application Security integrates and support security at every phase of the software development lifecycle (SDLC) and work closely with developers to ensure applications are secure from inception through release. Given Teradata's large portfolio of analytic applications, we are pushing the boundaries of security by automating source code analysis, and analytic security. Our expertise lies in deep technical understanding of security and our application security engineers within Teradata. The Application Security team is tasked with enabling software developers to build secure application and products through automating security (Shifting Left). * Analyze and triage findings from SAST, SCA, DAST, IaC, and container scanning tools to identify true positives and eliminate noise. * Deliver clear, actionable remediation guidance to development teams for AppSec findings across the application portfolio. * Perform code reviews and reason about vulnerabilities across Java, C/C++, Go, Python, and JavaScript/TypeScript codebases. * Integrate and tune AppSec scanning tools within CI/CD pipelines to shift security left in the SDLC. * Assess web applications and APIs for common vulnerability classes including the OWASP Top Ten (2025). * Apply OWASP ASVS, AISVS, and SVPS standards to application security assessments and security requirement definitions. * Review AI-assisted development workflows and evaluate agentic systems for risks such as prompt injection, excessive permissions, unsafe tool use, and insecure output handling. * Investigate software supply chain risks by analyzing open-source dependencies for known vulnerabilities, suspicious packages, and dependency confusion exposures. * Write and maintain automation scripts in Go to streamline security processes and tool integrations. * Review and assess Infrastructure as Code configurations in Terraform, CloudFormation, Helm, and Ansible for security misconfigurations. * Evaluate cloud environments across AWS, Azure, and/or Google Cloud for AppSec risk and misconfigurations. * Communicate security findings and risk clearly to both technical and non-technical stakeholders. * Support compliance activities related to PCI-DSS and FedRAMP as they intersect with application security. Who You'll Work With * The Application Security team is an integral part of Teradata Information Security and closely partners and guides Product Engineering. Application Security team works with several teams such as CloudOps, DevOps and our Engineering teams., * Read and reason about code in Java, C/C++, Go, Python, or JavaScript/TypeScript to identify and address security issues. * Integrate SAST, SCA, DAST, IaC, and Container scanning into CI/CD pipelines. * Spot manual security processes and build automation to replace them. * Write and maintain security automation scripts in Go. * Identify and remediate software supply chain risks including malicious or compromised third-party packages, typosquatting, and dependency confusion attacks. * Evaluate internal software and third-party products against security requirements. * Evaluate new technologies and development practices for AppSec impact. * Apply OWASP AI security standards to assess and reduce risk in AI-generated code and agentic workflows outlined in OWASP AI Top Tens. * Familiarity with the OWASP AISVS and OWASP Top 10 for LLMs, Agentic Apps, or NHIs as emerging standards for AI security. * Translate SAST, SCA, DAST, IaC, container scan, and pentest findings into plain-language summaries for non-security audiences. * Work directly with Product Engineering to improve security practices across the Secure SDLC. * Deliver developer training on secure coding, security requirements, and AppSec tooling. * Guide and mentor software engineers on vulnerability remediation. * Serve as the go-to SME for AppSec topics, processes, and tooling. * Make sound, well-reasoned security decisions and explain the tradeoffs clearly. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)