Application Security Engineer: Bug Bounty & Remediation

Truist Financial; Atlanta (GA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan

Vacation days

Disability coverage

Job summary

Truist Financial is seeking a Security Engineer to manage and triage bug bounty submissions, validate findings, and coordinate remediation with product, engineering, and security teams. The role involves threat modeling, vulnerability analysis, and security testing to strengthen Truist's security posture.

Remote work is considered for well-qualified candidates outside the Truist footprint, with hours aligned to Eastern Time.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.
• Proficiency in implementing and managing information security technologies.

Responsibilities

• Reviews, validates, and triages vulnerability reports submitted through Bug Bounty, assessing risk and business impact.
• Partners with product, engineering, and security teams to investigate findings, coordinate remediation, and verify resolution.
• Performs threat modeling, security testing, vulnerability analysis, and penetration testing across platforms.
• Investigates security issues escalated within the team, conducts root cause analysis, and drives corrective actions.
• Provides technical guidance on remediation, secure coding, and secure-by-design principles.
• Reviews emerging threats, attack techniques, and trends to improve security controls.
• Supports implementation and maintenance of security technologies, baselines, and configuration standards.
• Works with stakeholders to prioritize remediation based on severity and regulatory requirements.
• Assists with incident response, forensics, and security assessments.
• Tracks and reports on remediation progress and program metrics.
• Plans and manages work activities to meet objectives, developing expertise in app security.

Skills

Security engineering

Bug bounty experience

Threat modeling

Vulnerability testing

Remediation coordination

Security tooling

Education

Bachelor's degree

Job description

Truist Financial is seeking a Security Engineer to manage and triage bug bounty submissions, validate findings, and coordinate remediation with product, engineering, and security teams. The role involves threat modeling, vulnerability analysis, and security testing to strengthen Truist's security posture.

Remote work is considered for well-qualified candidates outside the Truist footprint, with hours aligned to Eastern Time.