Application Security Associate Director
Depository Trust & Clearing Corporation (DTCC)1 day ago
Tampa, FL, USAStaff+
Responsibilities
- Lead and mature SAST, DAST, and Software Composition Analysis capabilities across applications.
- Identify, prioritize, remediate, and escalate application security vulnerabilities based on risk and business impact.
- Partner with application development, engineering, architecture, and DevOps teams to embed security throughout the SDLC.
- Own and optimize Application Security platforms and integrate them into CI/CD pipelines and developer workflows.
- Establish Application Security standards, controls, governance, and secure development practices.
- Advise development teams on secure coding, application vulnerabilities, OWASP Top 10 risks, and remediation strategies.
- Develop metrics and reporting for vulnerability trends, remediation progress, security coverage, risk reduction, and program maturity.
- Drive automation, evaluate emerging and AI-enabled Application Security capabilities, and maintain alignment with security policies, standards, and regulatory expectations.
Requirements
- Minimum of 8 years of related experience, including significant experience in Application Security, product security, or secure software development.
- Strong experience with SAST, DAST, SCA, vulnerability management, and secure SDLC practices.
- Experience integrating Application Security tools and controls into CI/CD and DevSecOps environments.
- Experience working with development and engineering teams to assess application vulnerabilities and drive remediation.
- Bachelor’s degree preferred or equivalent experience.
- Strong knowledge of Application Security, secure coding, vulnerability management, OWASP Top 10, DevSecOps, and CI/CD security integration.
- Ability to assess technical security findings, determine risk and severity, and establish remediation priorities.
- Strong analytical, problem-solving, communication, stakeholder management, and organizational skills.
Benefits
- Competitive compensation including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal/family care, and other leaves of absence.
- Flexible hybrid work model with three days onsite and two days remote, specifically onsite Tuesdays, Wednesdays, and a third team- or employee-specific day.
Categories
About Depository Trust & Clearing Corporation (DTCC)
Depository Trust & Clearing Corporation (DTCC) runs global post-trade market infrastructure, delivering clearing, settlement, securities depository, trade reporting, and data services for broker-dealers, banks, and asset managers. It provides these services through subsidiaries such as DTC, NSCC, FICC, and the Global Trade Repository, with revenue primarily from transaction and service fees. Founded in 1973 and headquartered in Jersey City, NJ, DTCC is industry-owned and privately held, serving markets across multiple regions.