Senior Application Security Engineer

Truist; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan and pension options

Vacation & holidays

Job summary

Truist is seeking an experienced Application Security Engineer to design and implement security capabilities across the software development lifecycle. You will work with developers, DevOps, and security teams to identify, assess, and remediate vulnerabilities across diverse technologies and platforms.

Responsibilities include leading security initiatives, applying SAST/SCA tooling, and integrating security controls into CI/CD pipelines.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Designs and implements application security solutions to protect critical assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.
• Partners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
• Supports security testing, control validation, audits, compliance activities, and evidence collection.
• Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.
• Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
• Evaluates emerging threats, security tools, and architecture options to improve security posture.
• Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.
• Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Skills

SAST

SCA

Secrets Detection

IaC Security

Vulnerability Management

Programming (Python)

Programming (Java)

Programming (.NET)

CI/CD Pipelines

Git-based Workflows

Cloud Security

Education

Bachelor's degree or equivalent

Tools

GitLab Advanced SAST

JFrog Xray

Job description

Truist is seeking an experienced Application Security Engineer to design and implement security capabilities across the software development lifecycle. You will work with developers, DevOps, and security teams to identify, assess, and remediate vulnerabilities across diverse technologies and platforms.

Responsibilities include leading security initiatives, applying SAST/SCA tooling, and integrating security controls into CI/CD pipelines.