Description

Lead the strategic direction and execution of application security practices to ensure secure code development across the organization.

Responsibilities

• Implement benchmarks and metrics to measure the effectiveness of application security practices.
• Drive control coverage for container scanning, static source code analysis, infrastructure-as-code testing, and dynamic security testing.
• Manage application security review processes and integrate them directly into engineering workflows.
• Oversee external product vulnerability functions, including the bug bounty program.
• Partner with business stakeholders to drive continuous risk reduction.

Required Skills

• 10+ years of leadership experience running application security programs.
• Deep experience with SaaS, endpoint, and web application technologies.
• Strong understanding of the OWASP Top Ten and applicable design and code mitigations.
• Familiarity with AWS, GCP, or Azure.
• Working knowledge of compliance frameworks including SOX, NIST, FedRAMP, ISO 27001, and PCI DSS.
• Proven ability to influence multi-product engineering organizations and collaborate on tooling and processes.
• Master's Degree in Computer Science or Information Technology.

Preferred Skills

• Industry certifications such as OSCP, CEH, or CISSP.

Key Skills

Education

Any Graduate