Senior Associate Security Analyst (Application Security Team)
Truist Financial
- Location
- Atlanta, GA
- Work model
- On-Site
- Level
- Mid
- Posted
- 5h ago
Skills
About this role
The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status. Need Help? If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response). Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America) Please review the following job description: We are seeking a Senior Associate Security Analyst to join our Application Security team and help improve the security of enterprise applications throughout the Software Development Lifecycle (SDLC). This is an excellent opportunity for an early-career security professional who is passionate about cybersecurity, secure software development, and vulnerability management. The role will provide hands-on experience working with developers, DevOps engineers, and security professionals to identify, assess, and remediate security vulnerabilities across a variety of technologies and platforms. ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. Analyze and triage vulnerabilities identified through application security scanning tools. Assist development teams with understanding security findings and remediation recommendations. Support vulnerability remediation efforts and track remediation progress. Participate in application security control testing and validation activities. Collect and document evidence required for security assessments and audits. Generate and maintain security metrics, reports, and dashboards. Collaborate with development and DevOps teams to promote secure coding practices. Support integration of security controls and tools within CI/CD pipelines. Assist in developing and maintaining security standards, procedures, and documentation. Stay current on emerging application security threats, vulnerabilities, and industry best practices. Technical Skills Exposure to application security testing tools and methodologies, including: Static Application Security Testing (SAST) Software Composition Analysis (SCA) Secrets Detection Infrastructure as Code (IaC) Security Basic knowledge of vulnerability management and risk assessment. Experience with scripting or programming languages such as Python, Java, .NET, or similar. Familiarity with Git-based development workflows and CI/CD pipelines. Exposure to vulnerability scanning platforms such as GitLab SAST, J-Frog Xray, or similar tools. Knowledge of cloud platforms is a plus.
Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Bachelor’s degree in Information Technology, Computer Science, or related field. At least 2 years of experience in business systems analysis, system support, or related roles within enterprise technology environments. Strong understanding of business process analysis, requirements gathering, and documentation. Knowledge of enterprise systems, software development lifecycle, and support processes. Relevant certifications such as CBAP, CCBA, or equivalent are preferred.
Preferred Qualifications
Understanding of security controls, risk management, and compliance requirements. Strong analytical, communication, documentation, and problem-solving skills. Industry certifications such as CompTIA Security+, AWS Cloud Practitioner, Azure Fundamentals, or similar