Hands-On App Security Engineer: Secure Coding Champion

Truist; Atlanta (GA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k plan

Paid vacation

Job summary

Truist is seeking an Application Security Engineer to design and implement application security across the SDLC, collaborating with developers, DevOps, and security teams to identify, remediate, and prevent vulnerabilities.

The role emphasizes hands-on Secure Coding, security testing (SAST/SCA/Secrets Detection), and leadership in security initiatives across diverse technologies and platforms.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Designs and implements application security solutions to protect assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities from security scans.
• Partners with Dev and DevOps to embed secure coding practices into CI/CD pipelines.
• Supports testing, audits, compliance activities, and evidence collection.
• Maintains security standards, baselines, procedures, metrics, and reports.
• Leads security initiatives and coordinates engineering efforts for quality and compliance.

Skills

Application security testing

SAST

SCA

Secrets Detection

IaC Security

Vulnerability management

CI/CD pipelines

Programming languages

Education

Bachelor's degree

Tools

GitLab Advanced SAST

JFrog Xray

Job description

Truist is seeking an Application Security Engineer to design and implement application security across the SDLC, collaborating with developers, DevOps, and security teams to identify, remediate, and prevent vulnerabilities.

The role emphasizes hands-on Secure Coding, security testing (SAST/SCA/Secrets Detection), and leadership in security initiatives across diverse technologies and platforms.