Hybrid AppSec & Container Security Lead

DTCC; Dallas (TX); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Base pay + incentive

Health and life insurance

Pension/Retirement

Paid time off

Flexible hybrid onsite/remote

Job summary

DTCC is seeking an experienced security leader to drive application security governance across container platforms. You will shape build, deployment, and runtime security with policy-as-code and guardrails, partnering with Cloud, Platform, and Application teams to scale containerized workloads securely.

You will lead SCA/SAST/DAST programs, manage risk, and set security standards while maturing the program with automation, metrics, and continuous improvement.

Qualifications

• Minimum of 8 years of related experience.
• Bachelor's degree preferred or equivalent experience.

Responsibilities

• Lead SCA, SAST, and DAST programmes to provide scalable application security coverage across DTCC.
• Manage application security risk by driving vulnerability identification, prioritisation, remediation, and escalation.
• Partner with engineering teams to improve security outcomes and reduce application risk.
• Own AppSec platforms and services ensuring reliability, optimisation, adoption, and effective integration.
• Establish security standards and governance for secure development and testing practices.
• Drive programme maturity through metrics, reporting, automation, and continuous improvement.
• Advance detection capabilities by evaluating emerging technologies, tooling, and AI-driven security solutions.
• Maintain strong risk and control oversight through compliance with policies, standards, and regulatory expectations.

Skills

SCA/SAST/DAST

AppSec governance

Education

Bachelor's degree or equivalent

Job description

DTCC is seeking an experienced security leader to drive application security governance across container platforms. You will shape build, deployment, and runtime security with policy-as-code and guardrails, partnering with Cloud, Platform, and Application teams to scale containerized workloads securely.

You will lead SCA/SAST/DAST programs, manage risk, and set security standards while maturing the program with automation, metrics, and continuous improvement.