Specialist II, Application Security (TCF)
Core
Strengthen application security across the software development lifecycle by embedding secure coding practices, automating security testing, and supporting vulnerability remediation.
Role type
Mid-level IC application security specialist (DevSecOps)
Builds
Secure CI/CD pipelines, automated security testing workflows, and reduced risk posture for applications and APIs
Domain
Technology services / Application Security / DevSecOps
Required skills
Application security, DevSecOps, secure SDLC, SAST/DAST/SCA tools, API security, vulnerability management, CI/CD integration, OWASP/NIST frameworks
Preferred skills
Secure coding practices, automated security testing, external exposure management, root cause analysis, security training
Technologies
SAST, DAST, SCA, CI/CD pipelines, API security tools
Responsibilities
Embed security throughout the SDLC; Partner with developers to promote secure coding and identify gaps; Integrate and maintain security tools in CI/CD pipelines; Drive automation for security assessments and API testing; Monitor and manage risks for internet-facing applications; Track and support vulnerability remediation; Collaborate on root cause analysis and security improvements; Maintain security documentation and ensure alignment with standards.
Seniority
Mid-level, hands-on IC
