Application Security Senior Associate
Depository Trust & Clearing Corporation (DTCC)1 day ago
Tampa, FL, USASenior
Responsibilities
- Execute Software Composition Analysis, Static Application Security Testing, and Dynamic Application Security Testing activities.
- Review, validate, prioritize, remediate, retest, and close application security findings.
- Partner with application development and engineering teams to explain findings and recommend practical remediation.
- Support Application Security platforms and services through testing, analysis, monitoring, troubleshooting, and process adherence.
- Apply security standards, controls, and governance requirements to secure development and application security testing.
- Review evidence and track vulnerability exceptions and time-bound remediation commitments.
- Contribute to AppSec metrics, reporting, automation, continuous improvement, and audit documentation.
Requirements
- At least 6 years of related experience.
- Relevant experience in Application Security, secure software development, vulnerability management, or a related cybersecurity discipline.
- Working knowledge of SCA, SAST, DAST, and the application vulnerability management lifecycle.
- Ability to analyze technical security findings, assess risk, and communicate remediation requirements to engineering teams.
- Experience with Application Security tools, development pipelines, ticketing or workflow systems, and structured security evidence.
- Knowledge of secure development practices and common application security risks, such as the OWASP Top 10, is preferred.
- Bachelor’s degree preferred or equivalent experience.
Benefits
- Competitive compensation including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal and family care, and other leaves of absence.
- Flexible hybrid work model with 3 days onsite and 2 days remote; onsite Tuesdays, Wednesdays, and a third team- or employee-specific day.
Categories
About Depository Trust & Clearing Corporation (DTCC)
Depository Trust & Clearing Corporation (DTCC) runs global post-trade market infrastructure, delivering clearing, settlement, securities depository, trade reporting, and data services for broker-dealers, banks, and asset managers. It provides these services through subsidiaries such as DTC, NSCC, FICC, and the Global Trade Repository, with revenue primarily from transaction and service fees. Founded in 1973 and headquartered in Jersey City, NJ, DTCC is industry-owned and privately held, serving markets across multiple regions.