Raymond James
Lead Application Security Architect
“A corporate cybersecurity commitment, utilizing dedicated IT security and privacy teams for threat intelligence, and...”
Open security roles at Raymond James, and what we know about the team behind them.
financial services · 19000 employees · 3 open roles. Updated October 15, 2026.
Raymond James
“A corporate cybersecurity commitment, utilizing dedicated IT security and privacy teams for threat intelligence, and...”
Raymond James
“A corporate cybersecurity commitment, utilizing dedicated IT security and privacy teams for threat intelligence, and...”
Raymond James
“A corporate cybersecurity commitment, utilizing dedicated IT security and privacy teams for threat intelligence, and...”
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
“Raymond James' AppSec philosophy emphasizes a corporate cybersecurity commitment, utilizing dedicated IT security and privacy teams for threat intelligence, and employing technology to monitor, defend, and protect their infrastructure 24/7. They focus on application security and vulnerability management. However, explicit statements on developer enablement, risk philosophy, or specific pain points/goals are not publicly available.”
The team
Key public-facing individuals include Jeff Palmiero, Technical Vice President and Application Performance Management Architect, and Christian Alfano-Nerey, Senior Site Reliability Engineer. Raymond James posts jobs across corporate, technology, and operations. However, explicit AppSec organizational structure, reporting lines, team size estimates, or details on a Security Champions program are not publicly available.
What they're working on
Raymond James utilizes Dynatrace Application Security, which has significantly reduced high and critical vulnerabilities. They also mention application security concepts like SAST, DAST, IAST, SCA, and vulnerability management as areas of focus, and employ encryption, VPNs, and penetration/vulnerability testing. However, details on a Security Champions program, specific internal processes for vulnerability management (SLAs, ticketing, MTTR), or comprehensive "Shift Left"practices are not publicly available.