Lead, Application Security
Prudential FinancialBase Salary
$124k - $204k/yr
Responsibilities
- Serve as technical lead and escalation point for complex Application Security and Attack Surface Management work.
- Lead the design, execution, and evolution of application security assessment, response, risk governance, and monitoring processes.
- Integrate automated security controls, monitoring, reporting, workflow orchestration, and self-service capabilities into CI/CD pipelines.
- Partner with AppSec, DevOps, Cloud, engineering, business, and senior leadership teams to advance secure-by-design practices and risk reduction.
- Mature vulnerability and configuration monitoring across first-party, third-party, and open-source software.
- Define security policies, standards, alerting mechanisms, technical documentation, and SOPs aligned with regulatory and industry frameworks.
- Evaluate security technologies, perform technical due diligence, and provide strategic recommendations.
- Validate findings, reduce false positives, document compensating controls, and verify remediation effectiveness.
- Develop proof-of-concept exploits in lab environments and improve security posture metrics for executive and regulatory audiences.
- Mentor junior team members and provide technical guidance to improve team capability and consistency.
Requirements
- Bachelor’s degree in Computer Science or Engineering, or formal experience in related fields.
- Proven experience leading and maturing application security and vulnerability management programs.
- Deep familiarity with CVE, CVSS, EPSS, and CWE vulnerability and security data sources.
- Hands-on experience with SAST, SCA, DAST, and ASPM tooling, including software composition analysis, SBOMs, and supply chain risk.
- Experience with OWASP Top 10, OWASP WSTG, PTES, MITRE ATT&CK, NIST, CIS, and PCI DSS frameworks or standards.
- Experience working in agile and DevSecOps environments and partnering with engineering teams on remediation.
- Strong systems thinking, problem-solving, written communication, verbal communication, and ability to explain technical and business risk.
- Preferred scripting and automation experience with Python, PowerShell, or Bash.
- Preferred experience with exploit validation and web application penetration testing.
- Preferred knowledge of threat actors, real-world attack techniques, and Agentic AI or AI-assisted security use cases.
- Preferred advanced security certifications such as OSCP, GPEN, GWAPT, CASP+, GCSA, GCFA, or GCIH.
- Preferred cloud certifications covering AWS, Azure, or GCP.
- Ability to influence without authority and lead through technical expertise.
Benefits
- Market-competitive base salary with yearly bonus potential.
- Medical, dental, vision, life, and disability insurance.
- Paid Time Off and parental and military leave.
- 401(k) plan with company match up to 4%.
- Company-funded pension plan.
- Wellness programs with up to $1,600 per year in reimbursement for eligible wellbeing purchases.
- Work/Life Resources covering parenting, housing, senior care, finances, pets, legal matters, education, mental health, and career development.
- Education benefit for approved college degrees and accredited certificate programs.
- Employee Stock Purchase Plan allowing eligible shares to be purchased at 85% of the lower of the beginning or ending purchase-period prices.
Tech Stack
Categories
About Prudential Financial
Prudential Financial (NYSE:PRU) was founded on the belief that financial security should be within reach for everyone, and for over 150 years, we have helped our customers reach their potential and tackle life's challenges for now and future generations to come. Today, we are one of the world’s largest financial services institutions, offering individual and institutional clients a wide array of financial products and services. With operations in the United States, Asia, Europe and Latin America, we are known for delivering on our promises to our customers, and are recognized as a trusted brand and one of the world’s most admired companies. We also have one of the most recognized and trusted brand symbols: The Rock®, an icon of strength, stability, expertise and innovation. We measure our long-term success on our ability to deliver value for shareholders, meet customer needs, and attract and develop the best talent in our industry. We offer an inclusive work environment where employees can develop to their full potential, and give back to the communities where we live and work. (Pru.us/disclaimer)