Sr. Information Security Engineer

Job Description

Position not eligible for sponsorship.

Locations : Onsite in Memphis, TN; Maryville, TN; Birmingham, AL; Lafayette, LA; New Orleans, LA; Charlotte, NC; Raleigh, NC; or Dallas, TX.

Summary

This role focuses on comprehensive application security testing and vulnerability management across the software development lifecycle. It involves conducting automated and manual scans using tools like Invicti, Veracode, and Burp Suite to identify and remediate security flaws in application code and open-source components. The position requires strong collaboration with development and DevOps teams, secure coding expertise in languages such as Java and Python, and adherence to compliance frameworks including NIST, PCI-DSS, and SOX. The ideal candidate brings over five years of hands-on experience in application security, secure development practices, and automation within CI / CD environments.

To leverage deep expertise in application security testing, secure coding, and vulnerability management to enhance the security posture of enterprise applications. The goal is to proactively identify and remediate security risks, integrate security into DevOps workflows, and ensure compliance with industry standards, while fostering a collaborative environment that empowers development teams to build secure software from the ground up.

Major Responsibilities :

Application Security Testing & Analysis :

• Conduct SAST scans using Veracode to identify vulnerabilities in source code.
• Conduct SCA scans using Veracode to identify vulnerabilities in open-source components.
• Analyze scan results, identify root causes, and collaborate with developers to implement effective remediations.
• Work with CI / CD pipelines to integrate security testing into DevOps workflows.
• As-needed, conduct manual verification and secondary authenticated scans using Burp Suite to reduce false negatives.

Software Development & Secure Coding Knowledge :

Vulnerability Management & Compliance :

Services to be Performed

Qualifications :

Soft Skills :

Bonus Skills :

About Us First Horizon Corporation is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. The Company and its subsidiaries offer commercial, private banking, consumer, small business, wealth and trust management, retail brokerage, capital markets, fixed income, and mortgage banking services. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank. More information is available a t www.FirstHorizon.com .

Benefit Highlights

Follow Us Facebook

X formerly Twitter

LinkedIn

Instagram

YouTube