Senior Application Security Lead

Truist; Charlotte (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) plan

Job summary

Truist seeks an experienced Application Security Consultant to strengthen security across the development lifecycle. The role involves interpreting vulnerability data, performing control testing, and guiding application teams to address findings across multiple scanning disciplines.

You will work with Development, DevOps, and domain security teams to support secure design, remediation, and control readiness, ensuring robust security posture across Truist applications.

Qualifications

• Experience interpreting vulnerability data (severity, CVSS, exploitability) and coordinating remediation.
• Knowledge of secure SDLC, CI/CD, and DevSecOps practices.
• Ability to test controls and collect evidence across AppSec domains.
• Strong communication and technical writing skills.

Responsibilities

• Conduct control testing and validations across application security domains.
• Perform vulnerability analysis and remediation coordination for applications.
• Advise application teams on remediation and vulnerability burndown.
• Assist with remediation support, vulnerability analysis, and metrics across AppSec domains.
• Produce program metrics (burndown, aging, trend, adoption).
• Help develop and refine application security standards and intake workflows.
• Collaborate with DevOps to integrate security into CI/CD pipelines.
• Stay updated on emerging application security threats and technologies.

Skills

Application security

SAST

SCA

API security

Container security

IaC security

Threat analysis

Documentation

Education

Bachelor’s degree in Computer Science or related field

Tools

ServiceNow Vulnerability Response

Job description

Truist seeks an experienced Application Security Consultant to strengthen security across the development lifecycle. The role involves interpreting vulnerability data, performing control testing, and guiding application teams to address findings across multiple scanning disciplines.

You will work with Development, DevOps, and domain security teams to support secure design, remediation, and control readiness, ensuring robust security posture across Truist applications.