Lead, Application Security
Prudential FinancialBase Salary
$124k - $204k/yr
Responsibilities
- Serve as technical lead and escalation point for complex application security and attack surface management work.
- Lead the design, evolution, and execution of application security assessment, response, and risk governance processes.
- Integrate security controls into CI/CD pipelines through automation, monitoring, reporting, and self-service enablement.
- Mature vulnerability and configuration monitoring across first-party, third-party, and open-source software.
- Define security policies, standards, alerting mechanisms, workflow automation, and enterprise-scale application security requirements.
- Partner with engineering, DevOps, cloud, business, and senior leadership teams to advance secure-by-design practices.
- Validate findings, reduce false positives, document compensating controls, and drive remediation effectiveness.
- Measure and report application security posture and performance for executive and regulatory audiences.
- Evaluate security technologies, develop proof-of-concept exploits in lab environments, and provide technical recommendations.
- Author technical documentation, standards, and SOPs, and mentor junior team members.
Requirements
- Bachelor of Computer Science/Engineering or formal experience in related fields.
- Deep familiarity with CVE, CVSS, EPSS, and CWE vulnerability and security data sources.
- Proven experience leading and maturing application security and vulnerability management programs.
- Experience partnering with engineering teams to validate findings, reduce false positives, and drive remediation.
- Hands-on experience with OWASP Top 10, OWASP WSTG, PTES, MITRE ATT&CK, SAST, SCA, DAST, and ASPM tooling.
- Strong understanding of software composition analysis, SBOMs, supply chain risk, cloud security, and DevSecOps environments.
- Preferred scripting and automation experience with Python, PowerShell, or Bash.
- Preferred experience with exploit validation and web application penetration testing.
- Preferred knowledge of threat actors, real-world attack techniques, NIST, CIS, and PCI DSS.
- Preferred experience applying Agentic AI or AI-assisted approaches to security use cases.
- Advanced security or cloud certifications such as OSCP, GPEN, GWAPT, CASP+, GCSA, GCFA, GCIH, AWS, Azure, or GCP certifications.
- Ability to influence without authority, communicate technical and business risk, and lead through expertise.
Benefits
- Market-competitive base salary with yearly bonus potential.
- Medical, dental, vision, life, disability, PTO, and parental and military leave benefits.
- 401(k) plan with company match up to 4% and a company-funded pension plan.
- Wellness reimbursement of up to $1,600 per year.
- Work/life resources covering parenting, housing, senior care, finances, pets, legal matters, education, mental health, and career development.
- Education benefits for approved degree and accredited certificate programs.
- Employee Stock Purchase Plan allowing eligible shares to be purchased at 85% of the lower of two prices.
- Learning experiences and support for technical and leadership development.
Tech Stack
Categories
About Prudential Financial
Prudential Financial (NYSE:PRU) was founded on the belief that financial security should be within reach for everyone, and for over 150 years, we have helped our customers reach their potential and tackle life's challenges for now and future generations to come. Today, we are one of the world’s largest financial services institutions, offering individual and institutional clients a wide array of financial products and services. With operations in the United States, Asia, Europe and Latin America, we are known for delivering on our promises to our customers, and are recognized as a trusted brand and one of the world’s most admired companies. We also have one of the most recognized and trusted brand symbols: The Rock®, an icon of strength, stability, expertise and innovation. We measure our long-term success on our ability to deliver value for shareholders, meet customer needs, and attract and develop the best talent in our industry. We offer an inclusive work environment where employees can develop to their full potential, and give back to the communities where we live and work. (Pru.us/disclaimer)