16 application security engineer jobs at 12 companies in Charlotte, NC
1mo
Save
Mark Applied
Hide
1mo
Application Security Engineer
Hoover or Birmingham or Atlanta or Nashville or Charlotte
$134k-$176k/yrHybridFull Time
Regions BankNYSE: RF: Provides retail, commercial banking, wealth management, and mortgage services.
10+ YOEMinimum 10 years of related IT/Information Security experience or post-secondary education; high school diploma or GED required. Requires advanced security tooling knowledge, penetration testing, vulnerability assessment, scripting, and strong communication and analytical skills.
Metasploit, Contrast, AppSpider, Burp Suite, ZAP, PumaScan, Python, Ruby, PowerShell, BASH, Nmap, Nexpose, Nessus, WebInspect, Fortify, Common Vulnerability Scoring System (CVSS), Open Web Application Security Project (OWASP) Risk Rating Methodology
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
5+ YOE5+ years AppSec experience with SAST/SCA, CI/CD tool integration (Jenkins), Java experience (2+ years), Docker/cloud familiarity, vulnerability triage using ServiceNow, and development of security automation and AI-driven AppSec capabilities.
Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
TruistNYSE: TFC: Offers personal banking, business lending, and investment management services.
3+ YOEBachelor's or equivalent, 3+ years security engineering experience, API and application security expertise, DAST/DAST tooling experience, knowledge of OAuth2/OIDC/mTLS/JWT, Python and cloud familiarity.
Akamai, Salt Security, Traceable, Data Theorem, OWASP ZAP, SoapUI, ReadyAPI, Burp Suite, Synopsys WhiteHat, Qualys Web Application Scanning (WAS), Python, AWS, Microsoft Azure
Johnston or Pittsburgh or Irving or Phoenix or Franklin or Charlotte or Cleveland or Boston or Iselin or Philadelphia or Chicago
$175k-$250k/yrOnsiteFull Time
Citizens Financial GroupNYSE: CFG: Provides retail, commercial, and private banking services to customers.
10+ YOE10+ years engineering experience, strong AI/ML and security knowledge, hands-on Python, AWS, Linux, CI/CD experience, deep application and cloud security understanding, excellent communication and mentoring skills.
Python, AWS, Bash, Jenkins, CircleCI, GitHub Actions, Kubernetes, Linux
NTT DATA: Global provider of IT and business consulting services.
5+ YOE5+ years Java/J2EE experience, 3+ years application security, experience with web technologies and app servers, vulnerability management tools, RESTful APIs, and Agile practices.
PRA GroupNASDAQ: PRAA: Acquires and collects nonperforming loans for banks and creditors.
12+ YOE5+ Mgmt12+ years in information security with technical architecture and engineering depth; 5+ years leadership; cloud, IAM, application security, SIEM/XDR/SOAR, and 2+ years implementing AI/ML in security; Bachelor required, Masters preferred; security certifications preferred.
TruistNYSE: TFC: Offers personal banking, business lending, and investment management services.
7+ YOEBachelor's in CS or related, 7+ years software development with 5+ years full-stack, strong JS/TypeScript front-end and back-end skills, AI integration experience, testing/CI/CD, security, and strong communication.
Louisville or New York City or Dallas or Charlotte or Tampa or Miami or Washington or Chicago or Boston or Atlanta or Nashville
$142k-$196k/yrRemoteFull Time
HumanaNYSE: HUM: Provides health insurance plans and clinical healthcare services.
6+ YOE6+ Mgmt6+ years in red team/penetration testing with leadership experience; production Python engineering; built or operated agentic AI/LLM applications; experience attacking AI/ML systems; production cloud experience (AWS, GCP, or Azure).
Python, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, AWS, GCP, Azure, Hack The Box Pro Labs
Bachelor's degree or equivalent experience; strong experience with Java, Spring Boot, REST/GraphQL APIs, Angular/TypeScript, PostgreSQL, cloud-native practices, and AI concepts; ability to design and deliver scalable, secure enterprise applications.
Java, Spring Boot, REST APIs, GraphQL APIs, Reactive programming, Angular, TypeScript, RxJS, SQL, PostgreSQL, Python, Kubernetes, Helm, GitOps, API gateways
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
10+ YOE10+ years Java web application experience, LoanIQ required, Spring Boot/Security/Data/MVC, RESTful APIs, React, MS SQL Server, PKI/OWASP security knowledge, testing and performance tuning.
Java, LoanIQ, Spring Boot, RESTful APIs, React, Spring Security, Spring Data, Spring MVC, Unit Testing, Integration Testing, BDD Testing, Public Key Infrastructure (PKI), OWASP, apache camel, spring integration, Kubernetes, Microsoft SQL Server, NoSQL
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
6+ YOE6+ years experience with Java, microservices, Spring Boot, DevOps, API development, streaming (Kafka), and application security; strong OOP, CI/CD, and collaboration skills.
Java, Spring Boot, IntelliJ, Eclipse, VSCode, Postman, Git, Cucumber, REST, JSON, Apache Kafka, AI Copilot, AI Agents, Fortify, Black Duck, FOSSA, SonarQube, PractiTest, Playwright, Spec-Driven Development (SDD)
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
10+ YOE10+ years web application development using Java and React; strong OOP, RESTful APIs, Spring ecosystem, RDBMS, security (PKI, OWASP), performance tuning, microservices and integration experience.
Java, React, Spring Boot, Spring Security, Spring Data, Spring MVC, Microsoft SQL Server, Apache Camel, Spring Integration, Kubernetes, OWASP, PKI