Application Security Associate Director
About The Position
The Application Security Associate Director will strengthen DTCC’s application security posture by leading and maturing capabilities across SAST, DAST, Software Composition Analysis (SCA), and secure development practices. The role partners with engineering and technology teams to identify and reduce application security risk, embed security throughout the software development lifecycle, and continually improve Application Security capabilities. The position owns and optimizes Application Security platforms and services, establishes standards and governance for secure development and vulnerability remediation, and provides development teams with guidance on secure coding and remediation. It also develops program metrics and reporting, increases automation, evaluates emerging and AI-enabled security technologies, and ensures practices align with applicable policies, standards, and regulatory expectations. DTCC describes its work model as flexible/hybrid, with three days onsite and two days remote. The onsite days are Tuesdays, Wednesdays, and a third day determined by the team or employee.
Requirements
- Minimum of 8 years of related experience, with significant experience in Application Security, product security, or secure software development.
- Strong experience with SAST, DAST, SCA, vulnerability management, and secure SDLC practices.
- Experience integrating Application Security tools and controls into CI/CD and DevSecOps environments.
- Experience working with development and engineering teams to assess application vulnerabilities and drive remediation.
- Strong knowledge of Application Security concepts, secure SDLC, vulnerability management, secure coding practices, and the OWASP Top 10.
- Demonstrated experience implementing or managing SAST, DAST, and SCA solutions in complex application environments.
- Ability to assess technical security findings, determine risk and severity, and translate findings into clear remediation priorities.
- Strong understanding of DevSecOps principles and CI/CD security integration, including balancing security requirements with development needs.
- Strong analytical and problem-solving skills, including using metrics and data to identify application security risks and trends.
- Strong communication and stakeholder management skills to partner with developers, architects, engineers, technology leaders, and risk teams.
- Strong organizational skills and ability to manage multiple initiatives, vulnerabilities, remediation efforts, and priorities simultaneously.
Nice To Haves
- Bachelor’s degree preferred, or equivalent experience.
Responsibilities
- Lead and mature Application Security capabilities, including SAST, DAST, and SCA, to provide scalable security coverage across applications.
- Identify, prioritize, remediate, and escalate application security vulnerabilities according to risk and business impact.
- Partner with application development, engineering, architecture, and DevOps teams to embed security throughout the SDLC.
- Own and optimize Application Security platforms and services, ensuring reliability, scalability, adoption, and integration into CI/CD pipelines and developer workflows.
- Establish and maintain Application Security standards, controls, and governance for secure development, application testing, and vulnerability remediation.
- Guide development teams on secure coding practices, application vulnerabilities, remediation strategies, and risks such as those in the OWASP Top 10.
- Develop metrics and reporting for vulnerability trends, remediation progress, security coverage, risk reduction, and program maturity.
- Drive automation of Application Security processes to improve vulnerability detection, prioritization, and remediation.
- Evaluate emerging Application Security technologies and AI-enabled security capabilities.
- Maintain risk and control oversight and ensure practices align with applicable security policies, standards, and regulatory expectations.
Benefits
- Competitive compensation, including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal/family care, and other leaves of absence to support physical, financial, and emotional well-being.
- Flexible/hybrid work model with three days onsite and two days remote.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
Education Level
No Education Listed
