Senior App Security Lead - SDLC & SAST/DAST (Hybrid)

DTCC; Dallas (TX); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Flexible/hybrid work model

Health and life insurance

Pension / Retirement benefits

Paid Time Off

Job summary

DTCC is seeking an experienced Application Security professional to strengthen our security posture across the software development lifecycle. You will lead capabilities in SAST, DAST, and SCA, embed security into CI/CD, and work with engineering to reduce risk while guiding secure practices and governance.

Join a collaborative team focused on modern security, automation, and AI-enabled enhancements to protect critical financial services applications.

Qualifications

• Minimum of 8 years of related experience in Application Security, product security, or secure software development.
• Strong experience with SAST, DAST, SCA, vulnerability management, and secure SDLC practices.
• Experienced in integrating Application Security tools into CI/CD and DevSecOps environments.
• Experience collaborating with development teams to assess vulnerabilities and drive remediation.
• Bachelor's degree preferred or equivalent experience.

Responsibilities

• Lead and mature Application Security capabilities, including SAST, DAST, and SCA, across applications.
• Identify, prioritize, remediate, and escalate vulnerabilities based on risk and business impact.
• Partner with development, engineering, architecture, and DevOps to embed security in the SDLC.
• Own and optimize Application Security platforms and services within CI/CD pipelines.
• Establish and maintain security standards, controls, and governance for secure development and remediation.
• Provide guidance on secure coding practices and remediation strategies including OWASP Top 10.
• Develop metrics to measure vulnerability trends, remediation progress, and risk reduction.
• Drive automation across Application Security processes to improve detection and remediation.
• Evaluate emerging security technologies and AI-enabled capabilities to enhance risk management.
• Maintain risk and control oversight aligning with policies and regulatory expectations.

Skills

Application Security

SAST

DAST

SCA

Secure SDLC

CI/CD

DevSecOps

OWASP Top 10

Risk management

Stakeholder management

Communication

Education

Bachelor's degree

Tools

CI/CD tooling

SAST tooling

DAST tooling

SCA tooling

Job description

DTCC is seeking an experienced Application Security professional to strengthen our security posture across the software development lifecycle. You will lead capabilities in SAST, DAST, and SCA, embed security into CI/CD, and work with engineering to reduce risk while guiding secure practices and governance.

Join a collaborative team focused on modern security, automation, and AI-enabled enhancements to protect critical financial services applications.