Application Security Lead

Responsibilities

• Lead application security assessments using SAST, SCA, DAST, API security, secrets detection, and threat modeling.
• Integrate security controls and risk-based quality gates into GitHub, Azure DevOps, Jenkins, and cloud-native delivery platforms.
• Perform threat modeling and security design reviews for applications, APIs, and cloud services.
• Design and implement AI-enabled application security tools, agents, scripts, integrations, and automations.
• Partner with engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable SDLC controls.
• Provide technical leadership and mentoring while contributing to enterprise standards, procedures, and audit-ready documentation.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent professional experience.
• At least 6 years of experience in application security, DevSecOps, secure software engineering, or penetration testing.
• Strong knowledge of SAST, SCA, DAST, threat modeling, secure design principles, and CI/CD security practices.
• Experience integrating security controls into GitHub, Azure DevOps, Jenkins, and cloud-native delivery environments.
• Practical experience using generative AI and AI-assisted development tools to build security tools, scripts, integrations, or automations.
• Ability to lead technical engagements, communicate security risks to senior stakeholders, and drive remediation across distributed engineering teams.
• Strong analytical, problem-solving, communication, presentation, leadership, and mentoring skills.
• Preferred experience with Model Context Protocol, AI agents, agentic architectures, tool calling, retrieval-augmented generation, and secure enterprise AI integrations.
• Preferred experience with AWS, Azure, and GCP cloud application security and cloud-native security controls.
• Preferred scripting experience with Python, PowerShell, or similar languages.
• Preferred experience with software supply chain security, dependency governance, artifact management, provenance validation, and trusted package consumption.

Benefits

• Health care coverage, generous time off, continuous learning resources, retirement planning, continuing education support, company-matched student loan contributions, financial wellness programs, family benefits, retail discounts, and referral incentive awards are provided; benefits vary by country.