Director, Application Security Engineering (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via eFinancialCareers, so some details may not match this job. The employer's own page has the real description.

Overview

The Director of Application Security Engineering plays a pivotal role in enhancing the security posture of the organization by leading the application security team. This position requires overseeing the development, implementation, and maintenance of security policies and practices aimed at safeguarding applications from potential threats. This leadership role involves collaboration with various stakeholders to embed security throughout the software development lifecycle, ensuring that security measures are integrated from the ground up and that the team is equipped to respond to emerging threats effectively.

Job Responsibilities

• Lead and mentor a team of application security engineers, fostering a culture of security-first mindset and continuous improvement.
• Develop, implement, and manage security programs and policies related to application security.
• Collaborate with software development teams to integrate security practices throughout the software development lifecycle (SDLC).
• Conduct risk assessments and threat modeling for new and existing applications.
• Review and approve security architectures, designs, and data models to ensure compliance with security standards.
• Oversee vulnerability assessments and lead remediation efforts for identified application security issues.
• Stay abreast of industry trends, emerging threats, and regulatory changes to inform application security strategies.
• Facilitate training sessions and workshops for developers on secure coding practices and application security principles.
• Report on application security metrics and provide insights to senior leadership on security risks and mitigation strategies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's degree is a plus.
• Minimum of 10 years of experience in application security or a similar field, with at least 5 years in a leadership role.
• Strong knowledge of security frameworks, principles, and best practices, including OWASP Top Ten.
• Experience with secure coding practices, threat modeling, and security assessment methodologies.
• Familiarity with various programming languages, such as Java, Python, or C#, and the associated security concerns.
• Certification in relevant security fields such as CISSP, CISM, or CSSLP is highly desirable.
• Excellent communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven problem-solving skills and a strong analytical mindset.

Technologies & Tools

The position requires proficiency with various security technologies and tools such as static and dynamic application security testing (SAST/DAST) tools, security information and event management (SIEM) systems, and vulnerability management platforms. Familiarity with version control systems (e.g., Git), cloud security practices, and agile development methodologies is also essential. Other tools may include penetration testing software and threat intelligence solutions to help secure applications effectively.

Ideal Candidates

Ideal candidates for the Director of Application Security Engineering position are those who exhibit strong leadership capabilities, along with a proactive and strategic approach to security challenges. They are passionate about fostering collaboration between security and development teams, displaying exceptional communication skills that allow them to educate and influence others effectively. A result-oriented mindset, adaptability to change, and the ability to think critically about application security risks and trends are also essential qualities that will contribute to success in this role.