Application Security Associate Director

DTCC • Tampa, FL

1d • Hybrid

About The Position

The Application Security Associate Director will strengthen DTCC’s application security posture by leading and maturing capabilities across static application security testing (SAST), dynamic application security testing (DAST), Software Composition Analysis (SCA), and secure development practices. The role partners with engineering and technology teams to identify and reduce application security risk, embed security throughout the software development lifecycle, and continuously improve application security capabilities.

The position owns and optimizes application security platforms and services, including their reliability, scalability, adoption, and integration with CI/CD pipelines and developer workflows. It establishes application security standards, controls, and governance; guides development teams on secure coding and remediation; and develops metrics and reporting to track vulnerability trends, remediation progress, security coverage, risk reduction, and program maturity. The role also advances automation, evaluates emerging and AI-enabled security technologies, and maintains oversight to ensure alignment with security policies, standards, and regulatory expectations.

DTCC describes its work environment as a flexible hybrid model, with three days onsite and two days remote. The onsite schedule includes Tuesdays, Wednesdays, and a third day determined by the team or employee.

Requirements

• At least 8 years of related experience, with significant experience in application security, product security, or secure software development.
• Strong experience with SAST, DAST, SCA, vulnerability management, and secure SDLC practices.
• Experience integrating application security tools and controls into CI/CD and DevSecOps environments.
• Experience working with development and engineering teams to assess application vulnerabilities and drive remediation.
• Strong knowledge of application security concepts, secure SDLC, vulnerability management, secure coding practices, and the OWASP Top 10.
• Demonstrated experience implementing or managing SAST, DAST, and SCA solutions in complex application environments.
• Ability to assess technical security findings, determine risk and severity, and translate findings into clear remediation priorities.
• Strong understanding of DevSecOps principles and CI/CD security integration, balancing security requirements with development needs.
• Strong analytical and problem-solving skills, including using metrics and data to identify application security risks and trends.
• Strong communication and stakeholder management skills to partner effectively with developers, architects, engineers, technology leaders, and risk teams.
• Strong organizational skills and ability to manage multiple application security initiatives, vulnerabilities, remediation efforts, and priorities simultaneously.

Nice To Haves

• Bachelor’s degree or equivalent experience.

Responsibilities

• Lead and mature application security capabilities, including SAST, DAST, and SCA, to provide scalable security coverage across applications.
• Drive identification, prioritization, remediation, and escalation of application security vulnerabilities based on risk and business impact.
• Partner with application development, engineering, architecture, and DevOps teams to embed security throughout the SDLC.
• Own and optimize application security platforms and services, supporting reliability, scalability, adoption, and integration into CI/CD pipelines and developer workflows.
• Establish and maintain application security standards, controls, and governance for secure development, application testing, and vulnerability remediation.
• Guide development teams on secure coding practices, application vulnerabilities, and remediation strategies, including risks outlined in the OWASP Top 10.
• Develop metrics and reporting to measure vulnerability trends, remediation progress, security coverage, risk reduction, and application security program maturity.
• Drive automation across application security processes to improve vulnerability detection, prioritization, and remediation.
• Evaluate emerging application security technologies and AI-enabled security capabilities to enhance detection and risk management.
• Ensure application security practices align with applicable security policies, standards, and regulatory expectations.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off, personal and family care, and other leaves of absence.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed