Application Security Engineering Technical Director

Caesars is seeking a dynamic and experienced Application Security Engineering Technical Director to lead our efforts in building and maintaining a robust and scalable application security program. This role will be pivotal in driving a "shift left" security culture, focusing on integrating security seamlessly into our software development lifecycle (SDLC). The ideal candidate will possess deep expertise in automated code scanning and remediation, SAST, DAST, SCA, CI/CD pipeline integration, and a proven track record of building and leading high-performing security engineering teams. As the Director of Application Security Engineering, you will be responsible for defining and executing our application security strategy, ensuring the security of our applications from development to production. You will collaborate closely with development, DevOps, infrastructure, and other cybersecurity teams to embed security best practices and automate security processes, minimizing vulnerabilities and reducing risk. This is a hands-on technical leadership role. At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars, Harrah's, Horseshoe and Eldorado brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework. Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #WeAreCaesars”. If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.Technical Skills and Experience 10+ years of experience in Cybersecurity or a related technology risk role, with a focus on engineering and application security 5+ years of experience in a leadership role, managing and mentoring security and/or engineering teams Deep understanding of application security principles, OWASP Top 10, and common vulnerabilities. Proven experience in software development, with a strong understanding of secure coding practices and software architecture. In-depth knowledge of application security principles, including threat modeling, vulnerability assessment, and secure code review. Hands-on experience with security tools such as static and dynamic analysis tools, penetration testing frameworks, and security monitoring solutions. Strong experience integrating security testing into CI/CD pipelines using tools like Jenkins, GitLab CI, or Azure DevOps. Proficiency in scripting languages (e.g., Python, Bash) and infrastructure-as-code tools (e.g., Terraform, CloudFormation). Knowledge of cloud security principles and best practices (AWS, Azure, GCP). Relevant certifications such as AWS Certified Security Specialty, CISSP, GCIH, or GCED are preferred. Soft Skills Proven ability to mentor, lead, and develop application security engineers. Excellent verbal and written communication skills; ability to present technical concepts clearly. Strong teamwork skills and the ability to work with diverse teams across the organization. Analytical mindset with the ability to troubleshoot complex security issues. Ability to thrive in a fast-paced and evolving cybersecurity environment. Strategic Leadership Develop and implement a comprehensive application security strategy aligned with business objectives, focusing on automation and proactive security measures. Lead, mentor, and grow a small team of application security engineers, fostering a culture of innovation, collaboration, and continuous improvement. Champion the "shift left" security philosophy, embedding security considerations early in the SDLC. Security Automation and Integration Drive the implementation and optimization of automated security testing tools and processes, including SAST, DAST, SCA, and IAST. Integrate security testing seamlessly into CI/CD pipelines, enabling continuous security monitoring and remediation. Technical Leadership Lead the evaluation, selection, implementation, and optimization of new application security technology solutions. Evaluate and manage relationships with security tool vendors, ensuring optimal performance and cost-effectiveness. Mentor and guide junior application security engineers, providing technical expertise and fostering professional development. Collaborate with cross-functional teams to continuously improve application security processes, tools, and workflows. Continuous Improvement and Automation Identify opportunities to enhance the identification, assessment, and remediation of software issues and vulnerabilities. Develop and implement scripts and workflows to streamline operations and reduce manual effort. Stay current with emerging security threats, software development practices and platforms, software vulnerabilities, and industry best practices. Communication and Collaboration Closely partner with development teams to drive secure coding practices and application security principles. Effectively communicate complex technical issues to both technical teams and non-technical stakeholders. Prepare and deliver reports, dashboards, and presentations to leadership and other departments. Build strong relationships with IT, DevOps, and business units to ensure alignment on security objectives. Full timePosting Date: 2026-06-11