Senior AppSec Engineer — Remote

First Citizens Bank; Austin (TX); On-site; USD 100,000 - 140,000; Full time

Job summary

First Citizens Bank is seeking a Cyber Security Analyst to focus on application security, vulnerability management, and secure software practices in a remote role across NC, AZ, and TX. The role combines hands-on security testing with collaboration across development teams to strengthen our software supply chain.

The ideal candidate has experience with SAST/DAST/SCA, OWASP Top 10, API security, and CI/CD integration, and possesses strong scripting skills in Python/Java/JavaScript.

Qualifications

• Bachelor's Degree and 6 years' experience in information security OR High School Diploma/GED with 10 years' experience.

Responsibilities

• Perform SAST, DAST, and SCA to identify vulnerabilities in applications and third‑party components.
• Analyze scan results, triage findings, and prioritize remediation efforts based on risk.
• Partner with development teams to remediate vulnerabilities and improve secure coding practices.
• Conduct regular security assessments and vulnerability scans across applications and environments.

Skills

SAST/DAST/SCA tools

Secure SDLC/DevSecOps

Programming: Python/Java/JS/Bash

Threat modeling (STRIDE)

Stakeholder communication

Education

Bachelor's Degree or higher

10+ years information security experience OR 6+ with degree

Tools

Checkmarx

Veracode

Fortify

Snyk

Burp Suite

OWASP ZAP

Job description

First Citizens Bank is seeking a Cyber Security Analyst to focus on application security, vulnerability management, and secure software practices in a remote role across NC, AZ, and TX. The role combines hands-on security testing with collaboration across development teams to strengthen our software supply chain.

The ideal candidate has experience with SAST/DAST/SCA, OWASP Top 10, API security, and CI/CD integration, and possesses strong scripting skills in Python/Java/JavaScript.