Application Security Sr. Associate Analyst

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:
Regular

Language Fluency:  English (Required)

Work Shift:
1st shift (United States of America)
#

Please review the following job description:

We are seeking an Application Security Sr. Associate Analyst to join our Application Security team and help developers build secure software across the enterprise. This is a developer-enablement role and an entry point into a specialized application security career.

A high-level degree or technical degree, along with a demonstrated understanding of application security concepts through education, internships, or relevant project work. A willingness to learn and build deeper expertise in supporting the Application Security team is essential.

This role will develop a strategic approach to support the Application Security team’s book of work, helping coordinate day-to-day priorities, track key milestones and deadlines, and provide visibility into delivery progress. The role will proactively identify risks, dependencies, and potential delays to ensure appropriate escalations are made in advance and commitments remain on track.

The role will work across the full range of AppSec functions, including static and composition analysis (SAST, SCA), cloud and container scanning, security tool pipeline integration, OSINT, and DevSecOps automation. With guidance from senior analysts and stack owners, and will build knowledge across these areas to effectively support the team, document processes, assist developers, and help develop training and automation that scale the team’s impact.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

- Learn how the team supports developers across AppSec disciplines (such as SAST, SCA, cloud and container scanning, OSINT, and DevSecOps automation) and help address routine questions under guidance.
- Help create and maintain developer training, secure-coding guidance, and self-service enablement content.

- Assist with managing team processes and workflows to streamline operations and improve efficiency including measuring Key Performance Indicators and Key Risk Indicators (KPI/KRI)

- Assist with security tool and pipeline integration workflows and help communicate results to stakeholders.
- Help build and maintain metrics, dashboards, and reporting on vulnerability posture and remediation progress.

- Develop automation solutions to streamline evidence collection, data gathering, and repetitive tasks, with guidance from senior team members..

- Gather and organize data from multiple tools and sources to support insights and reporting.
- Apply AI and automation tools to make triage, reporting, and enablement more efficient.

Technical Skills

- Develop an understanding of the Application Security team’s key functions and help support day-to-day priorities and requests.
- Assist with managing the team’s book of work, including tracking priorities, deadlines, milestones, and deliverables.
- Help identify potential risks, delays, or concerns and ensure they are communicated and escalated in advance.
- Create and maintain tracking and training materials, guidance, and other resources to support team members and business partners.
- Document processes, procedures, and workflows to make information easy to understand, share, and reuse.
- Support coordination of team activities and help ensure work progresses according to established timelines.
- Assist with developing and maintaining metrics, dashboards, and status reporting to provide visibility into progress and key priorities.
- Gather, organize, and review information from multiple sources to support reporting, decision-making, and team needs.
- Identify opportunities to improve or streamline processes and reduce repetitive work.
- Use AI and automation tools to improve efficiency, reporting, communication, and overall team support.

Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

- Bachelor’s degree in Information Technology, Computer Science, a related field, or equivalent education, training, and work-related experience.
- At least 2 years of experience in business systems analysis, system support, or related roles within enterprise technology environments.
- Strong understanding of business process analysis, requirements gathering, and documentation.
- Knowledge of enterprise systems, software development lifecycle, and support processes.
- Relevant certifications such as CBAP, CCBA, or equivalent are preferred.

Preferred Qualifications

- Degree or coursework in Computer Science, Software Engineering, Cybersecurity, or a related field.

- Hands-on experience through internships, project work, or security competitions (e.g., CTFs, hackathons).
- Exposure to AI/ML tools and frameworks (e.g., LLM APIs, prompt-based automation).
- Progress toward an entry-level security certification (e.g., Security+).
- Exposure to vulnerability management platforms (e.g., ServiceNow VR).

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site . Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law     E-Verify IER Right to Work