Lead Application Security Engineer

Socket.dev; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k) plan

Job summary

Truist Financial Corporation is seeking an experienced Application Security Engineer to design and implement security across the software development lifecycle. This role partners with developers, DevOps, and security teams to embed secure coding practices and remediation workflows.

The ideal candidate has 5+ years in security engineering, strong knowledge of SAST/SCA, IaC security, and cloud-native security.

Qualifications

• Strong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and IaC Security.
• Solid understanding of vulnerability management, risk assessment, and remediation practices.
• Proficiency in one or more programming or scripting languages, such as Python, Java, .NET, or similar technologies.
• Experience with Git-based development workflows, source control management, and CI/CD pipeline integration.
• Hands-on experience with application security and vulnerability scanning platforms such as GitLab Advanced SAST, JFrog Xray, or equivalent solutions.
• Experience with cloud platforms and cloud-native application security practices is preferred.
• Ability to collaborate effectively with developers, DevOps engineers, and security teams to integrate security throughout the software development lifecycle.

Responsibilities

• Designs and implements application security solutions to protect assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.
• Partners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
• Supports security testing, control validation, audits, compliance activities, and evidence collection.
• Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.
• Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
• Evaluates emerging threats, security tools, and architecture options to improve security posture.
• Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.
• Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Skills

SAST

SCA

Secrets Detection

IaC Security

Vulnerability Mgmt

Python

Java

.NET

CI/CD

Git-based workflows

Cloud security

Education

Bachelor’s degree

Tools

GitLab Advanced SAST

JFrog Xray

Job description

Truist Financial Corporation is seeking an experienced Application Security Engineer to design and implement security across the software development lifecycle. This role partners with developers, DevOps, and security teams to embed secure coding practices and remediation workflows.

The ideal candidate has 5+ years in security engineering, strong knowledge of SAST/SCA, IaC security, and cloud-native security.