Description

You will define and lead the Application Security strategy for DCMS applications, driving remediation, onboarding, and alignment with enterprise SDLC requirements.

This role is on-site.

Responsibilities

• Identify control gaps and drive remediation plans with application teams and stakeholders.
• Partner with AppSec Champions and engineering teams to ensure consistent adoption of security controls.
• Design and implement automated threat modeling using code, IaC, and application metadata.
• Develop adversarial testing capabilities for GenAI and LLM-based applications, including prompt injection defenses.
• Drive AppSec modernization through automation, rationalization, and platform integration.

Required Skills

• 7+ years of Application Security or Information Security Engineering experience at enterprise scale.
• Deep expertise in SSDLC controls: threat modeling, secure design, SAST, SCA, DAST, and penetration testing.
• Proven ability to define security strategy and deliver outcomes through influence and technical leadership.
• Experience securing GenAI and LLM-based applications, including adversarial testing and prompt-injection defenses.
• Experience designing AI-driven security automation or decisioning capabilities.
• Strong understanding of DevSecOps and CI/CD security integration.
• Experience working in highly regulated environments such as financial services.

Preferred Skills

• Relevant security certifications (CISSP, CSSP, CISM, or equivalent).

Key Skills

Education

Bachelor's degree