Application Security Engineer

Application Security Engineer Service, respect, and connection are core to the individual and collective TRS experience. We know that great service rests on a foundation of relationships that connect us all to an empowering and rewarding career. At TRS, we're inspired by our community who bring authenticity and commitment to our mission to improve the retirement security of public education employees and retirees throughout Texas. As a group of achievers, we tap collaboration and innovation to raise the bar in performance, administering and counseling pensions and healthcare benefits to ensure certainty for the future of our members. We invite you to join us, where both personal and career growth are respected and where you can make a difference in our members' lives every day. The Application Security Engineer is responsible for performing complex information technology, and cyber security analysis and control work. The incumbent will maintain the security and integrity of communication infrastructure systems and cybersecurity systems, as defined in Section 117.001(2) of the Texas Business and Commerce Code; and ensure the security of TRS applications by implementing and managing application security measures, working closely with the other Information Security team members, the IT department, application development teams, and business technologists to identify and mitigate security risks, develop and implement security protocols, and provide training and support to development staff. Cybersecurity Works with application development teams to develop and implement secure coding practices, including coding standards, code reviews, and security-focused testing. Develops and execute a process for regular application security assessments, including code reviews, threat modeling, and design reviews. Develops and maintain a library of secure coding resources for application developers. Develop and implement application security policies and procedures that align with industry standards and best practices. Provides regular reports to the Information Security Leadership on the status of application security assessments. Work with application development teams to prioritize and remediate identified vulnerabilities. Provide training and support to application developers on secure coding practices. Monitor and enforce compliance with application security policies, procedures, and tooling. Collaborate with the IT department, Information Security team, and application development teams to design and implement security controls and measures, including access controls, encryption, and network segmentation. What Will You Bring