Application Security Lead
S&P Global2 days ago
Base Salary
$120k - $150k/yr
Responsibilities
- Lead application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
- Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native delivery platforms.
- Perform threat modeling and security design reviews for applications, APIs, and cloud services.
- Design and implement AI-enabled application security tools, agents, scripts, integrations, and automations.
- Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable SDLC controls.
- Provide technical leadership and mentoring while contributing to enterprise standards, procedures, and audit-ready documentation.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent professional experience.
- At least 6 years of experience in application security, DevSecOps, secure software engineering, or penetration testing.
- Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
- Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
- Practical experience using generative AI and AI-assisted development tools to build security tools, scripts, integrations, or automations.
- Ability to lead technical engagements, communicate security risks to senior stakeholders, and drive remediation across distributed engineering teams.
- Strong analytical, problem-solving, communication, presentation, leadership, and mentoring skills.
- Preferred experience with Model Context Protocol, AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure enterprise AI integrations.
- Preferred experience with AWS, Azure, and GCP cloud application security and cloud-native security controls.
- Preferred scripting experience with Python, PowerShell, or similar languages.
- Preferred experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.
Benefits
- Health care coverage, generous time off, continuous learning resources, retirement planning, continuing education support, company-matched student loan contributions, financial wellness programs, family benefits, retail discounts, and referral incentive awards are provided; benefits vary by country.