Senior Application Security Engineer - DAST & Auth Testing

Cybersecurity Jobs; Raleigh (NC); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Life insurance

Disability

AD&D

401k

Vacation

Paid holidays

Pension plan

Restricted stock units

Deferred compensation

Job summary

Truist Bank is seeking an experienced Application Security Engineer to act as a technical specialist in Dynamic Application Security Testing (DAST). This Raleigh, NC onsite role focuses on designing and enhancing DAST capabilities for complex web applications and APIs across the software development lifecycle, with a strong emphasis on authenticated testing validity and reliable assessment outcomes.

The Application Security Engineer will validate authenticated assessments, build reusable

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge of cybersecurity principles, theories, and concepts.
• Proven experience applying security practices across the software development lifecycle.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• English language fluency (Required)

Responsibilities

• Design, configure, test, and continuously improve advanced DAST solutions and technical patterns for complex web applications and APIs.
• Perform and validate complex authenticated assessments, including login success, session state, crawl coverage, attack surface coverage, vulnerability results, and overall assessment validity.
• Engineer DAST scan policies, authentication workflows, login sequences, session handling, API definitions, custom scripts, integrations, and automation to enable reliable and repeatable testing.
• Investigate difficult or undefined assessment problems such as multifactor authentication constraints, incomplete crawling, blocked requests, dynamic application behavior, tool limitations, false positives, false negatives, and inconsistent results.
• Use browser, proxy, HTTP, API, logging, and diagnostic techniques to identify root causes and develop practical, reusable solutions.
• Analyze and document DAST evidence to separate validated vulnerabilities from suspected false positives, coverage limitations, and inconclusive results, and support remediation verification.
• Partner with application and engineering teams to understand runtime behavior, resolve testability constraints, and establish technically appropriate DAST configurations without assuming application readiness.
• Act as a technical escalation point by reviewing complex configurations and technical evidence, and share specialized knowledge through peer reviews, troubleshooting sessions, and reusable documentation.

Skills

Security engineering experience

Authentication testing expertise

Education

Bachelor’s degree or equivalent

Tools

DAST tools

HTTP

API testing

Browser debugging

Proxy

Logging

Job description

Truist Bank is seeking an experienced Application Security Engineer to act as a technical specialist in Dynamic Application Security Testing (DAST). This Raleigh, NC onsite role focuses on designing and enhancing DAST capabilities for complex web applications and APIs across the software development lifecycle, with a strong emphasis on authenticated testing validity and reliable assessment outcomes.

The Application Security Engineer will validate authenticated assessments, build reusable