{"id":2840481,"url":"https://alion.io/job/truist-application-security-engineer-hands-on-secure-coding","title":"Application Security Engineer (Hands-On Secure Coding)","company":{"id":5380,"name":"Truist","domain":"truist.com","url":"https://alion.io/company/truist","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":42,"ghost_share":0,"stale_share":0.524,"repost_share":0.048,"time_to_fill_p50_days":18,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":99000,"max_usd":191000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":".NET","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"Java","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Agile","optional":true},{"name":"C#","optional":true}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-22T00:50:53Z","board_verified":false,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.\nNeed Help?\nIf you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).\nRegular or Temporary:\nRegularLanguage Fluency: English (Required)\nWork Shift:\n1st shift (United States of America)Please review the following job description:\nWe seek an Application Security Engineer with proven hands-on Secure Coding expertise to design and implement application security capabilities across the software development lifecycle, including secure development, security scanning, testing, and vulnerability management.Builds and enhances scalable, reliable, and secure technology solutions by analyzing trends, establishing security baselines, and preparing for future requirements.\nCollaborates closely with developers, DevOps engineers, and security teams to identify, assess, and remediate security vulnerabilities across diverse technologies and platforms.\nESSENTIAL DUTIES AND RESPONSIBILITIES\nFollowing is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.\nDesigns and implements application security solutions to protect critical assets and support secure software development.\n\nAnalyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.\n\nPartners with development and DevOps teams to promote secure coding practices and integrate security controls into CI/CD pipelines.\n\nSupports security testing, control validation, audits, compliance activities, and evidence collection.\n\nDevelops and maintains security standards, baselines, procedures, metrics, reports, and documentation.\n\nServes as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.\n\nEvaluates emerging threats, security tools, and architecture options to improve security posture.\n\nProvides technical leadership, mentoring, and knowledge sharing across engineering and security teams.\n\nLeads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.\n\nTechnical Skills Qualifications\nStrong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and Infrastructure as Code (IaC) Security.\n\nSolid understanding of vulnerability management, risk assessment, and remediation practices.\n\nProficiency in one or more programming or scripting languages, such as Python, Java, .NET, or similar technologies.\n\nExperience with Git-based development workflows, source control management, and CI/CD pipeline integration.\n\nHands-on experience with application security and vulnerability scanning platforms such as GitLab Advanced SAST, JFrog Xray, or equivalent solutions.\n\nExperience with cloud platforms and cloud-native application security practices is preferred.\n\nAbility to collaborate effectively with developers, DevOps engineers, and security teams to integrate security throughout the software development lifecycle.\n\nRequired Qualifications\nThe requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nBachelor’s degree or equivalent education, training, and work-related experience.\n\nMinimum of 5 years of experience in security engineering or related cybersecurity roles.\n\nAdvanced knowledge in cybersecurity principles, theories, and concepts.\n\nProven experience in software development lifecycle security practices.\n\nAdvanced knowledge of threat modeling, security testing, and penetration testing.\n\nExperience implementing and managing complex information security technologies.\n\nPreferred Qualifications\nUnderstanding of security controls, risk management, and compliance requirements.\n\nStrong analytical, communication, documentation, and problem-solving skills.\n\nIndustry certifications such as CISSP, CEH, or similar certifications are a plus.\n\nExperience working in an Agile development environment is preferred.\n\nDemonstrated eagerness to learn new technologies and grow within the application security field.\n\nGeneral Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truistoffers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.\nTruist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.\nEEO is the Law E-Verify IER Right to Work","description_format":"text","description_chars":6239,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["401k plan","Life insurance","Restricted stock units"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commercial & Retail Banks","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-19T08:47:11Z"}],"visa":[],"liveness":{"score":50,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.62,"p_room":0.9,"age_days":9,"expected_fill_days":18,"reasons":["conf:53","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/truist-application-security-engineer-hands-on-secure-coding","json_url":"https://alion.io/job/truist-application-security-engineer-hands-on-secure-coding.json","meta":{"generated_at":"2026-10-24T12:57:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18676,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5380},"rest":"https://alion.io/mcp/rest/get_company?id=5380"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftruist-application-security-engineer-hands-on-secure-coding"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftruist-application-security-engineer-hands-on-secure-coding"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftruist-application-security-engineer-hands-on-secure-coding"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/truist-application-security-engineer-hands-on-secure-coding\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftruist-application-security-engineer-hands-on-secure-coding"}]}