Lead, Application Security

What you'll do

• Lead the design and execution of application security assessment, response, and risk governance processes.
• Integrate security controls into CI/CD pipelines through automation and self-service enablement.
• Manage vulnerability and configuration monitoring across first-party, third-party, and open-source software.
• Design and evolve security policies and standards aligned with SOX, NIST, and PCI DSS frameworks.
• Evaluate and vet new security technologies to provide strategic recommendations and technical due diligence.
• Develop proof-of-concept exploits in lab environments to validate remediation effectiveness.
• Author and maintain technical documentation, standards, and SOPs to improve program maturity.
• Provide mentorship and technical guidance to junior team members to raise overall team capability.

What we're looking for

• Bachelor of Computer Science/Engineering or formal experience in related fields.
• Proven experience leading and maturing application security and vulnerability management programs.
• Deep experience with SAST, SCA, DAST, and ASPM tooling.
• Hands-on experience with industry frameworks including OWASP Top 10, OWASP WSTG, PTES, and MITRE ATT&CK.
• Strong understanding of software composition analysis (SCA), SBOMs, and supply chain risk.
• Experience working in agile and DevSecOps environments.
• Scripting and automation experience in Python, PowerShell, or Bash (preferred).
• Advanced security or cloud certifications such as OSCP, GPEN, GWAPT, CASP+, GCSA, GCFA, GCIH, AWS, Azure, or GCP (preferred).