Application Security Engineer (Hands-On Secure Coding)
Truist Financial Corporation7 days ago
Atlanta, GA, USASenior
Responsibilities
- Design and implement application security solutions supporting secure software development and protection of critical assets.
- Analyze, prioritize, track, and remediate vulnerabilities identified through security scanning tools.
- Partner with development and DevOps teams to promote secure coding and integrate security controls into CI/CD pipelines.
- Support security testing, control validation, audits, compliance activities, and evidence collection.
- Develop and maintain security standards, baselines, procedures, metrics, reports, and documentation.
- Serve as a technical escalation point by providing root-cause analysis and remediation guidance for complex security issues.
- Evaluate emerging threats, security tools, and architecture options to improve the organization’s security posture.
- Provide technical leadership, mentoring, knowledge sharing, and coordination of application security engineering efforts.
Requirements
- Bachelor’s degree or equivalent education, training, and work-related experience.
- At least 5 years of experience in security engineering or related cybersecurity roles.
- Advanced knowledge of cybersecurity principles, theories, concepts, threat modeling, security testing, and penetration testing.
- Proven experience securing the software development lifecycle and implementing complex information security technologies.
- Strong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and IaC Security.
- Proficiency in one or more programming or scripting languages such as Python, Java, or .NET.
- Experience with Git-based development workflows, source control management, and CI/CD pipeline integration.
- Hands-on experience with application security and vulnerability scanning platforms such as GitLab Advanced SAST, JFrog Xray, or equivalent solutions.
- Understanding of vulnerability management, risk assessment, remediation practices, security controls, risk management, and compliance requirements.
- Cloud platform and cloud-native application security experience is preferred.
- Industry certifications such as CISSP or CEH are preferred, and Agile development experience is preferred.
- Strong analytical, communication, documentation, problem-solving, collaboration, and learning skills.
Benefits
- Eligible regular employees working 20 or more hours per week may receive medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401(k) plan.
- Employees receive at least 10 days of vacation, 10 sick days, and paid holidays during the first year, prorated as applicable.
- Depending on position and division, the role may be eligible for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan.
- This is a regular, non-temporary position on the first shift in the United States, with English fluency required.
About Truist Financial Corporation
Truist Financial Corporation provides consumer, small‑business, and commercial banking, plus capital markets, payments, mortgage, and wealth management services across the U.S. It earns interest and fee income from deposits, lending, investment banking, and advisory services delivered through Truist Bank and affiliates. The company was formed in 2019 by the merger of BB&T and SunTrust Banks and is headquartered in Charlotte, North Carolina; it is publicly traded on the NYSE (ticker: TFC).