JOB DESCRIPTION

Are you ready to make an impact at DTCC

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

Competitive compensation, including base pay and annual incentive
Comprehensive health and life insurance and well-being benefits, based on location
Pension / Retirement benefits
Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact you will have in this role:

Execute SCA, SAST, and DAST activities to provide effective application security coverage
Review application security findings, validate risk, and support prioritization, remediation, retesting, and closure.Partner with application and engineering teams to explain findings, recommend practical remediation actions, and track progress.
Support AppSec platforms and services through test execution, issue analysis, operational monitoring, and process adherence.
Apply established security standards and governance requirements across secure development and testing activities.
Support FOSS and vulnerability exception workflows by reviewing evidence, documenting decisions, and tracking time-bound remediation commitments.
Contribute to metrics, reporting, automation, and continuous improvement initiatives that strengthen AppSec delivery.
Maintain complete and accurate records to support risk, control, audit and regulatory expectations.

Qualifications:

Minimum of 6+ years of related experience
Bachelor's degree preferred or equivalent experience
Relevant experience in application security, secure software development, vulnerability management, or a related cybersecurity discipline.
Bachelor's degree preferred or equivalent experience.
Working knowledge of SCA, SAST, and DAST concepts and the application vulnerability lifecycle.
Ability to analyse technical findings, communicate risk clearly, and work with engineering teams through remediation.
Experience working with security tools, development pipelines, ticketing or workflow systems, and structured evidence is preferred.

Talents Needed for Success:

Communicates technical security issues clearly and collaborates constructively with application and engineering teams.
Works with accuracy, follows through on commitments, and escalates risks or blockers promptly.
Approaches findings with sound judgement, curiosity, and a focus on practical risk reduction.
Seeks feedback, shares knowledge, and contributes to continuous improvement across the team.
Supports an environment where honesty, transparency, teamwork, and respect are expected.

Cyber Security Application Senior Associate