Location: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
- Vulnerability Management
- Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
- Application Security Testing
- Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
- Penetration Testing
- Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
- Collaboration & Reporting
- Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
Skills Required
- 1-3 years of hands-on experience in vulnerability management, application security testing, or web/mobile/API penetration testing
- Working knowledge of the OWASP Top 10 and secure coding fundamentals
- Ability to explain common security issues and remediation approaches to developers
- Familiarity with CI/CD pipelines and integrating security checks into developer workflows
- Foundational scripting or automation skills for testing and reporting
- Strong communication and collaboration skills
- Ability to document findings and work with engineering teams to drive remediation
- Exposure to software composition analysis and secrets/dependency scanning
- Experience operating vulnerability scanning platforms or application security testing tools
- Cloud security awareness related to application and vulnerability management workflows
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP in progress
- Bachelor's degree in a related field or equivalent practical experience
First Horizon Bank Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about First Horizon Bank and has not been reviewed or approved by First Horizon Bank.
-
Retirement Support — Retirement offerings include a 401(k) plan with company matching contributions up to 6% of pre-tax income, alongside FSA/HSA options and a defined benefit pension plan. Stock purchase and equity programs (including options and RSUs) also add to longer-term wealth-building opportunities for eligible employees.
-
Parental & Family Support — Parental leave is available for childbirth, adoption, foster parenting, or surrogacy, and adoption reimbursement is included in the package. These family-building benefits broaden support beyond traditional maternity/paternity leave structures.
-
Wellbeing & Lifestyle Benefits — Wellbeing support includes an internal wellness program, an employee assistance program, and access to a digital wellness platform. Group life insurance and disability coverage (including no-cost options) strengthen financial protection and day-to-day support.
First Horizon Bank Insights
What We Do
When we opened our doors in 1864 on North Court Street in Memphis, we had a simple mission: to provide the best service to our customers, one opportunity at a time. In the 150 years that followed, our communities transformed and expanded. We’ve seen our business and banking in general grow and adapt to the changing needs of customers through the years. But one thing that will always remain constant is our commitment to financial integrity and to helping our customers take good care of their money.
.png){kind=logo}
