Description

Lead enterprise application security strategy, automating controls across CI/CD pipelines and driving secure development practices.

This role is on-site.

Responsibilities

• Architect scalable CI/CD integrations for SAST, DAST, SCA, and secrets scanning using policy-as-code and automated gating.
• Implement Tier 3 merge-prevention gates and optimize build-failure workflows to ensure strict compliance.
• Lead complex vulnerability triage for advanced threats including supply chain risks, AI/ML apps, and container misconfigurations.
• Conduct proactive threat modeling and security design reviews for high-risk, business-critical applications.
• Mentor AppSec Specialists and upskill engineering teams on governance workflows and emerging security techniques.

Required Skills

• 12+ years of experience in Application Security engineering or secure development.
• Expertise in CI/CD-integrated security automation, including IaC scanning and secrets management.
• Deep knowledge of advanced AppSec concepts: secure design patterns, threat modeling, and exploit analysis.
• Experience with microservices, APIs, and cloud-native architectures.
• Ability to interpret complex vulnerability trends and zero-day risk scenarios.
• Strong track record influencing senior technical leaders and driving program adoption.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.

Preferred Skills

• Hands-on experience with cloud-native security tooling across AWS, Azure, or GCP.
• Certifications: CISSP, CSSLP, OSWE, OSCP, or GWAPT.
• Familiarity with policy tools (OPA/Gatekeeper), SLSA, SBOM, and Infrastructure-as-Code security.

Key Skills

Education

Bachelor's or Master's degrees