Head of Application Security

Analog Devices

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Wilmington, MA
Salary
$219,200–$301,400 / yr
Employment
Full-time
Posted
64 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $192k
This role $260k
$127k $320k
below market most similar roles pay here above market

This role pays more than 90% of similar roles. Most pay $161,237–$222,025 — the blue band above. At the midpoint, this role pays about $260k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About Analog Devices

Analog Devices, Inc. is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge.

Analog Devices currently has 6 open roles on FindRole.

Listed pay typically runs $130,885–$185,057 across 6 roles with salary data.

Most-posted roles

View all roles at Analog Devices

At a glance

TL;DR · Head of Application Security

JOB TITLE: Head of Application Security The Head of Application Security is a senior leadership role responsible for protecting software, artificial intelligence, and products at the heart of the business. Reporting to the Chief Information Security Officer, this leader will build and scale a developer-first application security capability across the software development lifecycle. Key responsibilities include establishing secure-SDLC policies, hardening software supply chains, and managing risk-managed AI security programs for generative AI and large language models. The role also involves growing a company-wide product security practice, managing the Product Security Incident Response Team, and ensuring compliance with automotive, aerospace, and healthcare standards. The position requires expertise in SAST, SCA, DAST, secret scanning, and SBOM generation to secure components used in industrial, medical, and defense applications.

What you'll do

  • Establish and mature a developer-first application security (DevSecOps) capability across the software development lifecycle.
  • Define and operate a risk-managed AI security and governance program for generative AI and LLMs.
  • Grow a company-wide product security practice including PSIRT, coordinated vulnerability disclosure, and SBOM strategies.
  • Translate complex security exposures into quantified business and financial impacts for executive and Board-level decision-making.
  • Build and lead a high-performing, multidisciplinary team of security professionals across application, AI, and product security.
  • Align security practices with regulatory requirements for automotive, aerospace, healthcare, and industrial markets.
  • Integrate security risks into the enterprise risk model and chair cross-functional governance for risk acceptance.
  • Lead the response to significant security incidents, including regulatory engagement and external communications.

What we're looking for

  • Bachelor's degree in Engineering, Computer Science, Cybersecurity, or a related technical field (or equivalent experience).
  • 15+ years of progressive cybersecurity experience, including significant experience in a senior security leadership role in a large-scale, complex environment.
  • 15+ years of experience sponsoring and managing complex programs and projects.
  • Proven experience building, leading, and scaling security functions across large, global engineering organizations.
  • Deep expertise in establishing secure-SDLC/DevSecOps programs and embedding automated security testing into CI/CD pipelines.
  • Working knowledge of AI/GenAI security and governance frameworks and experience with product security, PSIRT, and SBOM transparency.
  • Demonstrated ability to translate complex technical risk into quantified business terms for executive and Board-level audiences.
  • Export-controlled and regulated environments (e.g., ITAR/EAR, CMMC).

More like this

Similar roles

Senior Application Security Architect

State Street

Quincy, MA +4 109 days ago $120,000–$202,500
Application Security AI Security Kubernetes DevSecOps CI/CD Infrastructure as Code SAST DAST IAST Software Composition Analysis Threat Modeling Zero Trust API Security OWASP Top 10 RAG Cloud-Native Containers SaaS SSDLC
10+ yrs exp Hybrid

Application Security Engineer

Booz Allen Hamilton

Annapolis Junction, MD +1 39 days ago $69,400–$158,000
SAST DAST SCA DevSecOps Secure SDLC Container Security Cloud Security Vulnerability Management OWASP SAMM BSIMM NIST SSDF NIST CSF ISO 27001 MITRE ATT&CK ISO/IEC 42001 IEC 62443
2+ yrs exp

Distinguished Engineer, AI Security

CVS Health

Scottsdale, AZ 54 days ago $175,100–$334,750
AI Security Generative AI LLM Transformer-based NLP Agentic AI Zero Trust MITRE ATLAS NIST RMF ISO/IEC Privacy-Enhancing Technologies (PETs) Adversarial ML Cloud Security Hybrid Infrastructure Model Lifecycle Security Threat Modeling Vulnerability Management HIPAA GDPR NIST CSF
10+ yrs exp Hybrid

Director, Application Security

Zillow

Remote 35 days ago $220,200–$351,800
AWS Kubernetes Terraform Python Go CI/CD Zero Trust SAST DAST SOAR SIEM CSPM CWPP EDR DLP EPM CloudFormation infrastructure-as-code API Security
10+ yrs exp Remote

Lead Architect, Application Security

F5 Inc

San Jose, CA +1 40 days ago $297,600–$446,400
WAAP API Security DDoS Mitigation Bot Defense TLS OAuth2 OIDC SAML Kubernetes Istio Envoy NGINX BIG-IP FIPS FedRAMP NIST CSF ISO 27001 GDPR OWASP gRPC WebSockets HTTP/2 HTTP/3 Machine Learning Threat Modeling Policy-as-Code SaaS Agile
10+ yrs exp Hybrid

Head of Cloud Security Engineering

State Street

Quincy, MA +3 90 days ago
AWS Azure OCI Kubernetes Containers DevSecOps Policy-as-Code NIST 800-53 MITRE Framework Wiz Prisma SRE Cloud Security Architecture
10+ yrs exp