Senior AppSec Engineer: Secure SDLC & Testing

Truist; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid vacation

Job summary

Truist is seeking an Application Security Engineer to design and implement security controls across the software development lifecycle. You will collaborate with developers, DevOps, and security teams to safeguard critical assets and ensure secure coding practices.

The role emphasizes remediation of vulnerabilities detected by SAST/SCA tools, development of standards and metrics, and leadership across engineering and security to improve overall security posture.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, threat modeling, and security testing.

Responsibilities

• Designs and implements application security solutions to protect critical assets and support secure software development.
• Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.
• Partners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
• Supports security testing, control validation, audits, compliance activities, and evidence collection.
• Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.
• Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
• Evaluates emerging threats, security tools, and architecture options to improve security posture.
• Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.
• Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Skills

Application security testing

SAST

SCA

Secrets detection

IaC security

Vulnerability management

Programming: Python/Java/.NET

CI/CD integration

Education

Bachelor's degree or equivalent

Tools

Git

GitLab Advanced SAST

JFrog Xray

CI/CD tooling

Job description

Truist is seeking an Application Security Engineer to design and implement security controls across the software development lifecycle. You will collaborate with developers, DevOps, and security teams to safeguard critical assets and ensure secure coding practices.

The role emphasizes remediation of vulnerabilities detected by SAST/SCA tools, development of standards and metrics, and leadership across engineering and security to improve overall security posture.