Associate Application Security Engineer – Bug Bounty, Vulnerability Management

🔥 1 minute ago

🌲 North Carolina – Remote

🌲 North Carolina – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Truist

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2019

🏦 Banking

💸 Finance

🤝 B2B

Banking • Finance • B2B

Truist is a financial institution that offers a wide range of banking services, focusing on branch banking, commercial banking, corporate and institutional banking, and mortgage and consumer lending. The company emphasizes a culture of care, diversity, and inclusion, striving to make a positive impact in clients' lives and the community. Truist provides various career opportunities and values employee growth, offering comprehensive benefits and resources for well-being. With a commitment to diversity and workplace equity, Truist has received numerous accolades for its employment practices, including recognition for diversity and inclusion efforts.

📋 Description

• Review, validate, and triage vulnerability reports submitted through the Bug Bounty program • Assess vulnerability risk, impact, exploitability, and business relevance • Partner with product, engineering, and security teams to investigate findings and coordinate remediation • Perform threat modeling, security testing, vulnerability analysis, and penetration testing • Investigate escalated security issues, conduct root cause analysis, and drive corrective actions • Provide technical guidance on vulnerability remediation, secure coding, and security design • Review emerging threats, attack techniques, and vulnerability trends to improve security controls • Support security technologies, control frameworks, security baselines, and configuration standards • Prioritize remediation based on severity, exploitability, business impact, and regulatory requirements • Assist with incident response, forensic investigations, and security assessments • Track and report vulnerability remediation progress, recurring issues, and program metrics • Plan and manage work activities while developing technical expertise in application security and offensive security

🎯 Requirements

• Bachelor’s degree or equivalent education, training, and work-related experience • Minimum of 3 years of experience in security engineering or related cybersecurity roles • Developing knowledge of cybersecurity principles, theories, and concepts • Experience in software development lifecycle security practices • Proficiency in implementing and managing information security technologies • English language fluency required • Must not require employer sponsorship for work visa status or employment authorization • Preferred: Experience participating in Bug Bounty Programs and Vulnerability Disclosure Programs, including vulnerability triage, validation, and remediation coordination • Preferred: Active involvement in the bug bounty, security research, or threat hunting community • Preferred: Familiarity with security automation, threat detection technologies, emerging cybersecurity trends, and risk-based vulnerability management

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • Accidental death and dismemberment coverage • Tax-preferred savings accounts • 401k plan • At least 10 days of vacation during the first year of employment, prorated • 10 sick days, prorated • Paid holidays • Defined benefit pension plan, depending on position and division • Restricted stock units, depending on position and division • Deferred compensation plan, depending on position and division