Senior AppSec Consultant — Secure DevOps & SDLC

Truist; Raleigh (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401k plan

Paid holidays

Job summary

Truist seeks an Application Security Consultant to strengthen the security posture of its applications throughout the development lifecycle. The role requires deep experience in application security, vulnerability data interpretation, and cross-team collaboration with DevOps and domain security teams.

The ideal candidate will test controls, coordinate remediation, and help teams understand findings across multiple scanning disciplines, while contributing to secure design and control readiness

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• Minimum of 7 years of professional experience in information security.
• Advanced knowledge of data security, privacy laws, regulatory compliance, and advanced security technologies.
• Experience in threat analysis, vulnerability testing, incident response, and forensic methodologies.
• Security certifications such as CISSP, CISM, GIAC preferred.

Responsibilities

• Conduct control testing and validations across application security domains.
• Perform vulnerability analysis and remediation coordination for applications.
• Advise application teams on remediation, including vulnerability burndown.
• Assist with remediation support, vulnerability analysis, and metrics across AppSec domains.
• Produce program metrics (burndown, aging, trend, adoption).
• Develop and refine application security standards, procedures, and intake workflows.
• Collaborate with DevOps to integrate security into CI/CD pipelines.
• Stay current with emerging app security threats, vulnerabilities, and technologies.

Skills

Application security

SAST

SCA

CI/CD security

Vulnerability management

Threat analysis

Documentation

Education

Bachelor’s degree in Computer Science or Information Systems

Tools

ServiceNow

Job description

Truist seeks an Application Security Consultant to strengthen the security posture of its applications throughout the development lifecycle. The role requires deep experience in application security, vulnerability data interpretation, and cross-team collaboration with DevOps and domain security teams.

The ideal candidate will test controls, coordinate remediation, and help teams understand findings across multiple scanning disciplines, while contributing to secure design and control readiness