Application Security Lead

Depository Trust & Clearing Corporation; Tampa (FL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Pension / Retirement benefits

Paid Time Off

Job summary

Depository Trust & Clearing Corporation is seeking an experienced Application Security leader to strengthen secure software practices across the SDLC. You will drive SAST, DAST, and SCA implementations, and collaborate with engineering and risk teams to reduce security risk.

You will advance automation, governance, and risk-based remediation while guiding development teams on secure coding and OWASP Top 10 controls. This role offers a hybrid work model in the US.

Qualifications

• Minimum of 8 years of related experience in Application Security or secure software development.
• Strong experience with SAST, DAST, SCA, vulnerability management, and secure SDLC.
• Experience integrating security tools into CI/CD and DevSecOps environments.
• Bachelor’s degree or equivalent experience.

Responsibilities

• Lead and mature Application Security capabilities across SAST, DAST, and SCA.
• Identify, prioritize, remediate, and escalate vulnerabilities by risk.
• Embed security throughout the Software Development Life Cycle (SDLC).
• Own and optimize security platforms, CI/CD integration, and developer workflows.
• Establish and maintain standards, controls, and governance for secure development.
• Provide guidance on secure coding practices and remediation strategies (OWASP Top 10).
• Develop metrics to measure vulnerability trends and program maturity.
• Drive automation across Application Security processes.
• Evaluate AI-enabled security technologies to enhance detection.
• Maintain risk oversight in line with policies and regulatory expectations.

Skills

SAST

DAST

SCA

CI/CD

DevSecOps

OWASP Top 10

Vulnerability management

SDLC

AI security

Security governance

Education

Bachelor’s degree or equivalent

Tools

SAST tools

DAST tools

SCA tools

Job description

Depository Trust & Clearing Corporation is seeking an experienced Application Security leader to strengthen secure software practices across the SDLC. You will drive SAST, DAST, and SCA implementations, and collaborate with engineering and risk teams to reduce security risk.

You will advance automation, governance, and risk-based remediation while guiding development teams on secure coding and OWASP Top 10 controls. This role offers a hybrid work model in the US.