Security Engineer (Application Security Testing)

Truist; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid vacation

Job summary

Truist is seeking an Application Security Engineer to design and implement security controls across the software development lifecycle. You will collaborate with developers, DevOps, and security teams to safeguard critical assets and ensure secure coding practices.

The role emphasizes remediation of vulnerabilities detected by SAST/SCA tools, development of standards and metrics, and leadership across engineering and security to improve overall security posture.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, threat modeling, and security testing.

Responsibilities

• Designs and implements application security solutions to protect critical assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.
• Partners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
• Supports security testing, control validation, audits, compliance activities, and evidence collection.
• Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.
• Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
• Evaluates emerging threats, security tools, and architecture options to improve security posture.
• Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.
• Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Skills

Application security testing

SAST

SCA

Secrets detection

IaC security

Vulnerability management

Programming: Python/Java/.NET

CI/CD integration

Education

Bachelor's degree or equivalent

Tools

Git

GitLab Advanced SAST

JFrog Xray

CI/CD tooling

Job description

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Designs and implements application security capabilities across the software development lifecycle, including secure development, security scanning, testing, and vulnerability management.

Builds and enhances scalable, reliable, and secure technology solutions by analyzing trends, establishing security baselines, and preparing for future requirements.

Collaborates closely with developers, DevOps engineers, and security teams to identify, assess, and remediate security vulnerabilities across diverse technologies and platforms.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Designs and implements application security solutions to protect critical assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.
• Partners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
• Supports security testing, control validation, audits, compliance activities, and evidence collection.
• Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.
• Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
• Evaluates emerging threats, security tools, and architecture options to improve security posture.
• Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.
• Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Technical Skills Qualifications

• Strong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and Infrastructure as Code (IaC) Security.
• Solid understanding of vulnerability management, risk assessment, and remediation practices.
• Proficiency in one or more programming or scripting languages, such as Python, Java, .NET, or similar technologies.
• Experience with Git-based development workflows, source control management, and CI/CD pipeline integration.
• Hands-on experience with application security and vulnerability scanning platforms such as GitLab Advanced SAST, JFrog Xray, or equivalent solutions.
• Experience with cloud platforms and cloud-native application security practices is preferred.
• Ability to collaborate effectively with developers, DevOps engineers, and security teams to integrate security throughout the software development lifecycle.

Required QualificationsThe requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Preferred Qualifications

• Understanding of security controls, risk management, and compliance requirements.
• Strong analytical, communication, documentation, and problem-solving skills.
• Industry certifications such as CISSP, CEH, or similar certifications are a plus.
• Experience working in an Agile development environment is preferred.
• Demonstrated eagerness to learn new technologies and grow within the application security field.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position.Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist's defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part‑time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work