Staff Engineer I - Application Security and Production Support Engineer

Western Alliance Bank•Columbus, OH

2d•Onsite

About The Position

An experienced and proactive Application Security and Production Support person is sought to join a growing team. The ideal candidate brings technical judgment and operational discipline to manage application security findings, drive timely remediations, and ensure ongoing SDLC compliance. This role emphasizes ownership of security outcomes (including SAST, DAST, and SCA), proactive management of technical debt and enablement. The Application Security and Production Support person partners closely with engineering, DevOps, QA, and product stakeholders to improve security posture, operational stability, and delivery effectiveness.

Requirements

5+ years of related experience in IT App Support, IT Development, IT Networking, or similar field.
Bachelor's degree in related field required.
Strong problem-solving, troubleshooting, and analytical skills with attention to detail.
Experience supporting enterprise applications, platforms, or technology services in a production environment.
Working knowledge of application architectures, integrations, and deployment models.
Familiarity with web applications, REST APIs, and application communication patterns.
Experience managing and remediating application security findings, including SAST, DAST, SCA, or equivalent security assessment results.
Experience with source control and development lifecycle tools such as Git, Azure DevOps, or similar platforms.
Understanding of relational database concepts and basic query troubleshooting.
Working knowledge of SDLC security practices, secure delivery principles, and compliance expectations.
Experience supporting production applications or platforms, including incident triage, root cause analysis, remediation tracking, and operational risk reduction.
Experience working within Windows-based enterprise environments, including lifecycle management, patching, upgrades, and operational support.
Experience working with Azure services and environments, including cloud administration, application hosting, identity management, security controls, and operational support.
Experience with identity, access, credential, certificate, or secrets management practices.
Experience supporting DevOps workflows, release processes, CI/CD pipelines, deployment activities, or operational readiness activities.
Experience operating within regulated environments with documented controls, audit requirements, security standards, and compliance obligations.
Intermediate to advanced knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices.
Advanced proven experience in leading cross-functional teams and managing multiple projects simultaneously. Additional experience with pipeline development and leveraging Azure DevOps while working on multiple projects simultaneously.
Intermediate to advanced ability to see the big picture and align projects with organizational goals.
Capable of leading and motivating cross-functional teams. Expertise in resolving conflicts and addressing challenges as well as skilled at identifying and mitigating risks at the project level. Proficient in governance patterns tied to intake, technical reviews and architectural compliance.
Advanced speaking and writing communication skills with the ability to work across engineering, infrastructure, security, QA, and business teams.

Nice To Haves

Intermediate to advanced knowledge of general Financial Services or Banking preferred.

Responsibilities

Own and manage application security findings, including SAST, DAST, and SCA results, ensuring timely remediation and ongoing SDLC compliance.
Drive remediation of technical debt across applications, infrastructure, and pipelines to improve security, stability, and maintainability.
Coordinate and execute production support activities, including incident triage, root cause analysis, and follow‑through on corrective actions.
Manage and oversee server lifecycle activities such as upgrades, patching, and end‑of‑life remediation in partnership with infrastructure and platform teams.
Own certificate and credential management, including renewals, rotations, and expiration risk mitigation.
Support and execute DevOps and operational tasks related to CI/CD pipelines, build processes, and deployment readiness.
Collaborate closely with engineering, DevOps, QA, and security partners to prioritize work, remove blockers, and drive secure delivery.
Contribute to technical documentation, standards, and runbooks to improve operational consistency and team enablement.
Proactively identify risks, gaps, and improvement opportunities related to application security, production readiness, and operational health.

Benefits

competitive salaries
an ownership stake in the company
medical and dental insurance
time off
a great 401k matching program
tuition assistance program
an employee volunteer program
a wellness program
opportunity to bolster business knowledge
learning the ins and outs of how successful companies operate and manage their finances
invaluable hands-on experience to help grow your career