Application Security Lead

Job Summary

Working remotely, the full-time salaried Application Security Lead will manage security integration within product development by collaborating with Development and DevOps teams to enforce secure coding practices and embed security controls into CI/CD pipelines.

Key responsibilities

• Develop and enforce secure coding standards and best practices across Development and DevOps teams
• Conduct threat modeling exercises and ensure security requirements are identified during the design process
• Participate in audits and reviews to ensure compliance with security best practices and integration of security tools

Required qualifications

• Associates degree in Information Technology or related field; Bachelor's preferred
• 7-10 years of experience in application security and development security programs
• Strong understanding of web application and API security, including OWASP Top Ten and API-specific attack vectors
• Hands-on experience with application security tooling and managing findings
• Experience securing SaaS or cloud-native platforms and familiarity with microservices and containerization