Senior Application Security Engineer — Hybrid

DTCC; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Base pay + incentive

Health & life insurance

Pension plan

Paid time off

Hybrid work model

Job summary

DTCC is seeking an experienced Application Security Senior Associate to strengthen our software security posture through SCA, SAST, and DAST testing. You will collaborate with development and engineering teams to drive effective remediation and support secure software delivery across the organization.

The role emphasizes risk assessment, clear communication of findings, and adherence to security standards and governance.

Qualifications

• Minimum of 6 years of related experience.
• Bachelor's degree preferred or equivalent experience.
• Experience in Application Security, secure software development, vulnerability management, or a related cybersecurity discipline.
• Working knowledge of SCA, SAST, and DAST concepts and the application vulnerability management lifecycle.
• Ability to analyze technical security findings, assess risk, and communicate remediation requirements clearly to application and engineering teams.
• Experience working with Application Security tools, development pipelines, ticketing or workflow systems, and structured security evidence.
• Knowledge of secure development practices and common application security risks, such as the OWASP Top 10, is preferred.

Responsibilities

• Execute SCA, SAST, and DAST activities to provide effective application security coverage.
• Review application security findings, validate risk and severity, and support prioritization, remediation, retesting, and closure.
• Partner with application development and engineering teams to explain security findings, recommend practical remediation approaches, and track vulnerabilities through resolution.
• Support Application Security platforms and services through security test execution, issue analysis, operational monitoring, troubleshooting, and adherence to established processes.
• Apply established security standards, controls, and governance requirements across secure development and application security testing activities.
• Support Free and Open Source Software (FOSS) and vulnerability exception processes by reviewing supporting evidence, documenting decisions, and tracking time-bound remediation commitments.
• Contribute to AppSec metrics, reporting, automation, and continuous improvement initiatives to strengthen security testing coverage and overall delivery.
• Maintain complete and accurate documentation and evidence to support risk, control, audit, and regulatory requirements.

Skills

Application Security

SCA

SAST

DAST

Vulnerability Management

Communication

Education

Bachelor's degree or equivalent

Job description

DTCC is seeking an experienced Application Security Senior Associate to strengthen our software security posture through SCA, SAST, and DAST testing. You will collaborate with development and engineering teams to drive effective remediation and support secure software delivery across the organization.

The role emphasizes risk assessment, clear communication of findings, and adherence to security standards and governance.