Location: Onsite at location listed in posting About the role First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services. What you’ll do
- Vulnerability Management
- Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
- Application Security Testing
- Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
- Penetration Testing
- Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
- Collaboration & Reporting
- Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
