Specialist II, Application Security (TCF)
Core
Embed application security throughout the SDLC by partnering with Security, DevOps, and Development teams to promote secure coding, identify gaps, and integrate automated security testing.
Role type
Application Security Specialist (DevSecOps)
Builds
Secure CI/CD pipelines with integrated SAST, DAST, and SCA tools; automated API security assessments; vulnerability management workflows.
Domain
Application Security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security, DevSecOps, secure SDLC practices, SAST/DAST/SCA tools, API security (auth, authz, rate limiting, access control), vulnerability management, CI/CD integration, OWASP/NIST standards
Preferred skills
Secure coding practices, external exposure management, attack surface monitoring, root cause analysis, security control improvements
Technologies
SAST, DAST, SCA, CI/CD pipelines
Responsibilities
Integrate and maintain SAST, DAST, and SCA tools within CI/CD pipelines; Automate application security assessments including API security testing; Track, prioritize, coordinate, and report remediation of vulnerabilities; Provide training and guidance on secure coding standards and risks; Collaborate on root cause analysis and security control improvements.
Seniority
Mid-level, hands-on IC