Application Security Engineer (Hands-On Secure Coding)

Truist Bank•Atlanta, GA

23d

About The Position

Truist seeks an Application Security Engineer with hands-on secure coding expertise to design and implement application security capabilities across the software development lifecycle, including secure development, security scanning, testing, and vulnerability management. The role builds and enhances scalable, reliable, and secure technology solutions by analyzing trends, establishing security baselines, and preparing for future requirements. It works closely with developers, DevOps engineers, and security teams to identify, assess, and remediate vulnerabilities across diverse technologies and platforms. The engineer designs application security solutions, tracks vulnerability remediation, promotes secure coding, and integrates security controls into CI/CD pipelines. The role also supports security testing, validation, audits, compliance, and evidence collection; maintains standards and documentation; provides root cause analysis and remediation guidance for complex issues; evaluates emerging threats and tools; and provides technical leadership and mentoring across engineering and security teams.

Requirements

Bachelor’s degree or equivalent education, training, and work-related experience.
Minimum of 5 years of experience in security engineering or related cybersecurity roles.
Advanced knowledge of cybersecurity principles, theories, and concepts.
Proven experience in software development lifecycle security practices.
Advanced knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.
Strong experience with application security testing methodologies and tools, including SAST, SCA, secrets detection, and Infrastructure as Code (IaC) security.
Solid understanding of vulnerability management, risk assessment, and remediation practices.
Proficiency in one or more programming or scripting languages, such as Python, Java, or .NET.
Experience with Git-based development workflows, source control management, and CI/CD pipeline integration.
Hands-on experience with application security and vulnerability scanning platforms such as GitLab Advanced SAST, JFrog Xray, or equivalent solutions.
Ability to collaborate effectively with developers, DevOps engineers, and security teams to integrate security throughout the software development lifecycle.

Nice To Haves

Experience with cloud platforms and cloud-native application security practices.
Understanding of security controls, risk management, and compliance requirements.
Strong analytical, communication, documentation, and problem-solving skills.
Industry certifications such as CISSP, CEH, or similar certifications.
Experience working in an Agile development environment.
Demonstrated eagerness to learn new technologies and grow within the application security field.

Responsibilities

Design and implement application security solutions to protect critical assets and support secure software development.
Analyze, prioritize, and track remediation of vulnerabilities identified through security scanning tools.
Partner with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.
Support security testing, control validation, audits, compliance activities, and evidence collection.
Develop and maintain security standards, baselines, procedures, metrics, reports, and documentation.
Serve as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.
Evaluate emerging threats, security tools, and architecture options to improve security posture.
Provide technical leadership, mentoring, and knowledge sharing across engineering and security teams.
Lead application security initiatives and coordinate security engineering efforts to ensure quality, consistency, and compliance.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated as applicable
10 sick days, prorated as applicable
Paid holidays
Depending on position and division, the role may also be eligible for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.