Director, Application Security Engineering (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via eFinancialCareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Director of Application Security Engineering will play a pivotal role in overseeing the strategic direction and implementation of application security protocols within the organization. This position requires a deep understanding of secure software development practices, risk assessment methodologies, and advanced security technologies. You will lead a team of dedicated professionals tasked with protecting the organization’s applications against vulnerabilities and ensuring compliance with industry standards. Your strategic leadership will be essential in fostering a culture of security while collaborating with cross-functional teams to integrate security practices into the software development lifecycle.

Job Responsibilities

• Develop and implement a comprehensive application security strategy that aligns with organizational goals.
• Lead and mentor a team of application security engineers, promoting best practices and continuous skill development.
• Conduct application security assessments, including threat modeling, code reviews, and vulnerability assessments.
• Collaborate with development teams to ensure the integration of security controls throughout the software development lifecycle.
• Establish and maintain security standards, policies, and procedures for application development.
• Utilize metrics and reporting tools to assess the security posture of applications and communicate findings to stakeholders.
• Stay current with emerging security threats and technologies, making recommendations for necessary changes to policies and procedures.
• Manage application security incidents, including investigation and remediation efforts.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's degree is preferred.
• 10+ years of experience in application security, software development, or related roles.
• Proven experience in leading application security teams and executing strategic security initiatives.
• In-depth knowledge of secure coding practices and common application vulnerabilities (e.g., OWASP Top Ten).
• Strong foundation in information security principles, risk management, and compliance frameworks.
• Excellent communication skills to effectively convey security practices to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.

Technologies & Tools

This position utilizes a variety of technologies and tools including, but not limited to, static and dynamic application security testing (SAST/DAST) tools, Application Security Testing frameworks, CI/CD pipeline tools, cloud security services, and secure coding libraries. Familiarity with programming languages such as Java, C#, or Python is essential, along with experience in using modern security information and event management (SIEM) tools.

Ideal Candidates

The ideal candidate for the Director, Application Security Engineering role will possess a blend of technical, strategic, and leadership skills. They will demonstrate a proactive approach to security, continually seeking innovative methods to enhance the security framework of applications. Strong analytical skills are essential for identifying vulnerabilities and proposing effective solutions. A collaborative mindset is crucial, as the role requires working closely with various departments to foster a security-conscious culture. Additionally, the ideal candidate will have a passion for mentorship, with the desire to cultivate the next generation of security professionals.