Director, Application Security

OverviewJob PurposeAs a Director in this role, you will lead two teams responsible for assuring secure software development and cloud security through education, continuous testing, and consultation.ResponsibilitiesCompetently differentiates FUD and hype from legitimate business risk and assigns practical severity ratings to detected weaknessesDemonstrates compromise of detected vulnerabilities to educate and motivate development teamsAdopts and improves on an established education, testing, and remediation methodology. Innovates and ensures all areas of the programs are operated effectively and results are distilled into meaningful metrics. Articulately codifies and communicates the Application and Cloud Security programs through writing and discussionRecruits, retains, and motivates highly talented staff and balances the need to allocate tasks efficiently with the need to keep talent engaged, challenged, and growingSuccessfully run an established enterprise AppSec program at scale, with 2,000+ applications and a large pool of developersCoaches and develops team leaders, including newer leadership hires, within an already high-performing, well-structured teamCommitted to continuous education and being a recognized industry leader in Application and Cloud SecurityApplication Identification and Review: is responsible for maintenance, execution, and reporting of the AppSec assurance tasks from Design Review through operating a Bug Bounty programStandards and Policies: owns the Application Development Security Policy and is responsible for timely, practical updates, communication, and educationSecure Design: establishes security requirements early in the SDLC and contributes security subject matter expertise during the development of new projects and releasesTool Management: implements and maintains cutting-edge technology to assess and protect applications and cloud environments throughout the SDLC and post deploymentEvaluates and applies AI and machine learning capabilities within the AppSec space, including AI-assisted vulnerability detection, AI-powered code review and testing tooling, and securing AI-integrated development pipelinesDeveloper Education: keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development communityCloud Practitioner: provides security leadership and solutions to business and technical teams as they look to build or buy products in the cloudBug Bounty Program: operates a responsible disclosure program that appropriately incentivizes and fosters positive relationships with security researchersKnowledge and ExperienceBachelor's degree in Computer Science, Engineering, MIS, CIS, or a related disciplineHands-on or program-level experience applying AI in the AppSec spaceSoftware engineering experience in Java, C++, Python, and/or related languagesHands-on experience with information security and related technologiesPreferred SkillsBackground in financial services or a comparable regulated enterprise environmentTechnical expertise and understanding of AWS and/or Azure cloud platformsHands-on experience with information security and related technologiesParticipation and leadership in Application Security consortia such as OWASP#LI-LG Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.