Define and execute a multi-year Application Security roadmap aligned with business goals and industry best practices
Integrate threat modeling, security tools & testing (SAST, SCA, DAST, IAST, RASP, etc.), and secure by design processes into the SDLC (CI/CD pipeline)
Perform security architecture reviews for major product changes
Oversee the end-to-end AppSec vulnerability lifecycle (identification, prioritization, and remediation)
Direct and manage incident response for application security alerts/incidents
Lead the strategy for third-party penetration tests
Deliver executive-level dashboards and reports on application security posture and risk trends
Manage and mentor a high-performing team of AppSec engineers
Drive continuous improvement activities, and deepen leadership awareness of product and application security risks
Collaborate with Engineering and Product leads to embed security into the SDLC

Requirements

10+ years of progressive application security experience (prior software development experience preferred)
Prior people leadership experience (3+ years) with the ability to lead, manage, and develop a technical Application Security Engineering team
Deep technical knowledge with a track record of successful execution in application security (secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
Strong knowledge of CI/CD pipelines, cloud-native security (GCP), and container security
Bachelor's degree in Computer Science or a related field, or its equivalent in work experience
Strong working knowledge of at least two programming or scripting languages

Benefits

A competitive salary and a 401(k) with a 5% company match to help you build long-term financial security
We provide the resources you need to thrive, from flexible time off and paid parental leave to an annual wellness allowance and comprehensive health coverage
Take advantage of a suite of premium perks, including Udemy access, childcare assistance, pet insurance, and a bevy of additional savings through Beneplace

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securitysecure SDLCpenetration testingSASTDASTIASTRASPSCACI/CD pipelinescloud-native security

Soft Skills

leadershipteam managementmentoringcollaborationstrategic planningincident responsecommunicationcontinuous improvement