Senior DAST Engineer for Web Apps & APIs

Truist; Raleigh (NC); Presencial; USD 110 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical, dental, vision

401k plan

Vacation and sick days

Disability insurance

Resumo da oferta

Truist is seeking an advanced technical specialist in Dynamic Application Security Testing (DAST) to design, configure, and improve testing capabilities for complex web applications and APIs across the SDLC.

You will work independently, serve as a technical authority for DAST standards, and partner with engineering teams to tailor configurations while maintaining a strong security posture.

Qualificações

• Bachelors or equivalent in security/related field and practical experience.
• Minimum 5 years in security engineering or related cybersecurity roles.
• Advanced knowledge of cybersecurity principles and testing.
• Experience with software development lifecycle security practices.
• Proficiency in threat modeling, security testing, and penetration testing.

Responsabilidades

• Designs, configures, tests, and improves advanced DAST solutions and patterns for complex web apps and APIs.
• Performs authenticated assessments including login, session state, crawl coverage, and vulnerability validation.
• Engineers DAST policies, authentication workflows, and automation for reliable testing.
• Investigates complex assessment problems including MFA constraints and dynamic behavior.
• Uses browser, proxy, HTTP, API, and diagnostics to identify root causes and practical solutions.
• Analyzes DAST evidence to distinguish confirmed vulnerabilities from false positives.
• Collaborates with development teams to align DAST configurations with runtime behavior.
• Acts as escalation point and shares knowledge through reviews and documentation.

Conhecimentos

Security engineering

Threat modeling

Security testing

Penetration testing

SDLC security

Authentication protocols

CI/CD integrations

Automation scripting

Formação académica

Bachelor’s degree or equivalent education, training, and work-related experience

Ferramentas

DAST platforms

Descrição da oferta de emprego

Truist is seeking an advanced technical specialist in Dynamic Application Security Testing (DAST) to design, configure, and improve testing capabilities for complex web applications and APIs across the SDLC.

You will work independently, serve as a technical authority for DAST standards, and partner with engineering teams to tailor configurations while maintaining a strong security posture.