AppSec Program Lead: Container Security & Risk (Hybrid)

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Base pay + annual incentive

Health and life insurance

Pension / Retirement benefits

Paid Time Off

Hybrid work model (3 onsite/2 remote)

Job summary

The Depository Trust & Clearing Corporation (DTCC) is seeking a senior security leader to drive application security governance across container platforms. You will own AppSec controls from build to runtime, partnering with Cloud, Platform, and Application teams to scale secure workloads and reduce risk.

Responsibilities include leading SCA/SAST/DAST programs, driving vulnerability remediation, and establishing security standards.

Qualifications

• Minimum of 8 years of related experience.
• Bachelor's degree preferred or equivalent experience.

Responsibilities

• Lead SCA, SAST, and DAST programmes to provide scalable application security coverage across DTCC.
• Drive vulnerability identification, prioritisation, remediation, and escalation.
• Partner with engineering teams to improve security outcomes and reduce application risk.
• Own AppSec platforms and services ensuring reliability, optimisation, adoption, and effective integration.
• Establish security standards and governance for secure development and testing practices.
• Drive programme maturity through metrics, reporting, automation, and continuous improvement.
• Advance detection capabilities by evaluating emerging technologies, tooling, and AI-driven security solutions.
• Maintain strong risk and control oversight through compliance with policies, standards, and regulatory expectations.

Skills

AppSec governance

Container security

Risk management

Security automation

Education

Bachelor's degree preferred or equivalent experience

Tools

SCA

SAST

DAST

Job description

The Depository Trust & Clearing Corporation (DTCC) is seeking a senior security leader to drive application security governance across container platforms. You will own AppSec controls from build to runtime, partnering with Cloud, Platform, and Application teams to scale secure workloads and reduce risk.

Responsibilities include leading SCA/SAST/DAST programs, driving vulnerability remediation, and establishing security standards.