Specialist II, Application Security (TCF)

Serve as a key bridge between Security, DevOps, and Development teams to embed security throughout the SDLC. Partner with application developers to promote secure coding practices, identify security gaps, and recommend effective remediation. Support and enhance DevSecOps practices with a focus on automated security testing across development workflows.

Experience or working knowledge in application security, DevSecOps, secure SDLC practices, or related security functions. Familiarity with security testing tools and approaches, including SAST, DAST, and SCA. Knowledge of API security concepts, including authentication, authorization, rate limiting, access control, and sensitive data exposure.