Associate Senior Security Engineer (Application Security Team)

Crump Life Insurance Svcs Inc; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

AD&D

401k plan

Vacation 10 days

Sick days 10

Holidays

Job summary

Truist Financial Corporation is seeking an Associate Senior Security to join the Application Security team. The role focuses on enabling developers, building secure software, and growing core AppSec expertise across the enterprise.

You will work on SAST, SCA, cloud/container scanning, tool pipelines, OSINT, and automation, learning from senior analysts to document processes, create training content, and scale security across teams.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.

Responsibilities

• Learn how the team supports developers across AppSec disciplines (SAST, SCA, cloud and container scanning, OSINT, DevSecOps automation) under guidance.
• Help create and maintain developer training, secure-coding guidance, and self-service enablement content.
• Document team processes and workflows clearly for knowledge sharing.
• Assist with security tool and pipeline integration workflows and explain results to developers.
• Help build and maintain metrics, dashboards, and reporting on vulnerability posture and remediation progress.
• Write scripts to automate evidence collection, data gathering, and repetitive tasks with support from seniors.
• Gather and organize data from multiple tools and sources to support insights and reporting.
• Apply AI and automation tools to improve triage, reporting, and enablement.

Skills

Python

Java

SAST

SCA

DevSecOps

CI/CD

Education

Bachelor's degree or equivalent

Tools

GitLab

GitHub

Azure DevOps

Job description

If you already have a profile with us, you can log in to check status. Need Help? If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response). Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America)

We are seeking an Associate Senior Security to join our Application Security team and help developers build secure software across the enterprise. This is a developer-enablement role and an entry point into a specialized application security career. The successful candidate has a demonstrated technical foundation, typically developed through a technical degree, internships, or hands-on project work, and is prepared to build deeper security expertise while supporting our teams.

You will work across the full range of our AppSec functions, such as static and composition analysis (SAST, SCA), cloud and container scanning, security tool pipeline integration, OSINT, and DevSecOps automation. With guidance from senior analysts and stack owners, you will learn each area well enough to help developers, document processes, and build the training and automation that scale the team's impact.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Learn how the team supports developers across AppSec disciplines (such as SAST, SCA, cloud and container scanning, OSINT, and DevSecOps automation) and help address routine questions under guidance.
• Help create and maintain developer training, secure-coding guidance, and self-service enablement content.
• Document team processes and workflows clearly so knowledge is easy to share and reuse.
• Assist with security tool and pipeline integration workflows and help explain results to developers.
• Help build and maintain metrics, dashboards, and reporting on vulnerability posture and remediation progress.
• Write scripts to automate evidence collection, data gathering, and repetitive tasks, with support from senior team members.
• Gather and organize data from multiple tools and sources to support insights and reporting.
• Apply AI and automation tools to make triage, reporting, and enablement more efficient.

Technical Skills

• A working foundation in programming or scripting (Python, Java, JavaScript, C#, or similar), sufficient to read and write code.
• Familiarity with application security concepts such as SAST, SCA, cloud and container scanning, security tool pipeline integration, OSINT, and similar disciplines.
• Basic understanding of CI/CD pipelines and DevSecOps concepts.
• Comfort working with data (JSON, CSV, spreadsheets) and an aptitude for automation and reporting.
• Awareness of core vulnerability concepts (severity, exploitability, CVSS) and the OWASP Top 10.
• Exposure to source control and pipeline platforms (such as GitLab, GitHub, or Azure DevOps).
• Ability to produce clear technical documentation and training content.
• Understanding of how AI/ML tools can support security and automation.
• Strong analytical and problem-solving skills with the ability to learn quickly in a technical environment.

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.
• Proficiency in implementing and managing information security technologies.

Preferred Qualifications

• Degree or coursework in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Hands-on experience through internships, project work, or security competitions (e.g., CTFs, hackathons).
• Exposure to AI/ML tools and frameworks (e.g., LLM APIs, prompt-based automation).
• Progress toward an entry-level security certification (e.g., Security+).
• Exposure to vulnerability management platforms (e.g., ServiceNow VR).

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation

• All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position.
• Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
• Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
• Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.
• As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law.

Truist is a Drug Free Workplace. EEO is the Law E-Verify IER Right to Work About Truist Truist is a purpose-driven financial services company, formed by the historic merger of equals of BB&T and SunTrust. We serve clients in a number of high-growth markets in the country, offering a wide range of financial services. At Truist, our purpose is to inspire and build better lives and communities. That happens through real care to make things better. To meet client needs, to empower teammates, and to lift up communities. Learn more about Truist on truist.com.