Security Engineer (Application Security Testing)
Truist Financial Corporation24 hours ago
Atlanta, GA, USASenior
Responsibilities
- Design and implement application security solutions across the software development lifecycle.
- Analyze, prioritize, track, and guide remediation of vulnerabilities identified through security scanning tools.
- Integrate security controls into development workflows and CI/CD pipelines while promoting secure coding practices.
- Support security testing, control validation, audits, compliance activities, and evidence collection.
- Develop and maintain security standards, baselines, procedures, metrics, reports, and documentation.
- Provide root cause analysis, remediation guidance, technical escalation support, leadership, mentoring, and knowledge sharing.
- Lead application security initiatives and coordinate security engineering efforts across engineering and security teams.
- Evaluate emerging threats, security tools, and architecture options to improve security posture.
Requirements
- Bachelor’s degree or equivalent education, training, and work-related experience.
- Minimum of 5 years of experience in security engineering or related cybersecurity roles.
- Advanced knowledge of cybersecurity principles, theories, concepts, threat modeling, security testing, and penetration testing.
- Strong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and Infrastructure as Code security.
- Experience with vulnerability management, risk assessment, remediation practices, software development lifecycle security, and complex information security technologies.
- Proficiency in one or more programming or scripting languages such as Python, Java, or .NET.
- Experience with Git-based development workflows, source control management, CI/CD pipeline integration, and application security scanning platforms such as GitLab Advanced SAST or JFrog Xray.
- Preferred experience with cloud platforms, cloud-native application security, security controls, risk management, compliance requirements, and Agile development environments.
- Industry certifications such as CISSP or CEH are a plus.
- Strong analytical, communication, documentation, problem-solving, collaboration, and learning abilities.
Benefits
- Eligible regular teammates working 20 or more hours per week may receive medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan.
- Eligible teammates receive at least 10 days of first-year vacation, 10 sick days, and paid holidays, prorated as applicable.
- Depending on the position and division, the role may be eligible for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan.
- This is a regular, non-temporary position on the first shift in the United States, with English fluency required.
About Truist Financial Corporation
Truist Financial Corporation provides consumer, small‑business, and commercial banking, plus capital markets, payments, mortgage, and wealth management services across the U.S. It earns interest and fee income from deposits, lending, investment banking, and advisory services delivered through Truist Bank and affiliates. The company was formed in 2019 by the merger of BB&T and SunTrust Banks and is headquartered in Charlotte, North Carolina; it is publicly traded on the NYSE (ticker: TFC).