AppSec Engineer

Digital Asset•New York City, NY

3d•Hybrid

About The Position

Digital Asset builds technologies for financial markets and develops mission-critical workflows using Daml on the Canton ledger and Canton Network. The security team provides infrastructure and application security guidance and tooling for Digital Asset products and services. The AppSec Engineer will help shape the company’s security posture across application security, vulnerability management, identity and access management, cloud and network security, incident response, digital forensics, and DevSecOps. The role contributes to secure system design, incident response, security tooling, and adoption of security processes across teams. The position is based in the NY/NJ/CT tri-state area. The stated U.S. base salary range is $160,000–$190,000; the range may vary for candidates based outside that area. Digital Asset offers comprehensive, family-forward benefits and flexible working models. Benefits vary by region and may include medical, dental, and vision coverage.

Requirements

3–7 years of experience in IT and application security.
Bachelor’s degree in Cyber Security, Computer Science, or a related field.
Proven ability to perform vulnerability assessments and penetration tests, interpret results, and prioritize remediation.
Experience with threat modeling and threat intelligence.
Working knowledge of securing Google Cloud and AWS and Azure, including IAM, GKE, Cloud Armor, logging, and cloud data protection.
Proficiency in a scripting language such as Python, GoLang, or Bash to automate security tasks, analyze logs, and develop tools.
Expertise securing GKE cluster components, including Pod Security Standards enforcement, Network Policies, and runtime security observability.
Experience integrating SAST/DAST, dependency scanning, and SCA into CI/CD pipelines and hardening build infrastructure and workflows.
Strong oral and written communication skills; ideally, experience writing technical documentation and specifications.
Some experience with cryptographic keys, KMS, and HSMs.
Based in the NY/NJ/CT tri-state area.

Responsibilities

Participate in and, in some cases, lead security incident response, including initial containment, investigation, forensic analysis, and post-incident reporting.
Contribute to secure design and architecture of new and existing systems, integrating security from the start.
Help foster a DevSecOps culture within the company.
Collaborate with other teams to facilitate adoption of security processes and tooling.
Perform vulnerability assessments and penetration tests, interpret results, and prioritize remediation efforts.
Integrate SAST, DAST, dependency scanning, and software composition analysis into CI/CD pipelines.
Support security across application security, vulnerability management, IAM, cloud and network security, incident response, digital forensics, and DevSecOps.