Description

You will lead the operationalization of application security controls, driving large-scale adoption across engineering teams and the AppSec Champion community.

This role is on-site.

Responsibilities

• Architect scalable CI/CD integrations for SAST, DAST, SCA, and secrets scanning using policy-as-code and automated gating.
• Implement Tier 3 merge-prevention and build-failure gates to ensure strict compliance requirements are met.
• Lead complex vulnerability triage, remediation, and threat modeling for high-risk or business-critical applications.
• Design and maintain KPIs, scorecards, and compliance dashboards using analytics platforms.
• Mentor AppSec Specialists and upskill partner engineering teams on secure development practices and governance workflows.

Required Skills

• 10+ years of experience in Application Security engineering, vulnerability management, or secure development.
• Expertise in CI/CD-integrated security automation including SAST, DAST, SCA, and secrets scanning.
• Strong track record of working with engineering organizations and AppSec Champions to drive program adoption.
• Demonstrated ability to interpret complex vulnerability trends, emerging threats, and zero-day risk scenarios.
• Experience with Power BI, Grafana, or equivalent analytics platforms for reporting and dashboards.
• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
• Expertise in secure design patterns, threat modeling, and exploit analysis for modern architectures.

Preferred Skills

• Hands-on experience with cloud-native security tooling across AWS, Azure, or GCP.
• Certifications: CISSP, CSSLP, OSWE, OSCP, GWAPT, or equivalent.

Key Skills

Education

Any Graduate