Director, Application Security Engineering (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via eFinancialCareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Director, Application Security Engineering will spearhead the organization's efforts to protect applications from threats and vulnerabilities. This role encompasses leading a team of talented engineers, devising and implementing security strategies, and ensuring that industry standards and best practices are adhered to throughout the software development lifecycle. The successful candidate will collaborate closely with cross-functional teams to fortify development processes and deliver secure applications while fostering a culture of security awareness across the organization.

Job Responsibilities

• Lead and manage the Application Security Engineering team, ensuring effective execution of security initiatives.
• Develop and implement application security policies, standards, and guidelines aligned with regulatory requirements.
• Conduct threat modeling and risk assessments to identify potential vulnerabilities in applications.
• Collaborate with software engineers and developers to integrate security practices into the software development lifecycle (SDLC).
• Oversee security testing efforts, including static and dynamic analysis, penetration testing, and vulnerability assessments.
• Provide guidance and mentorship to team members regarding secure coding practices and application design.
• Stay up to date with the latest security trends, vulnerabilities, and regulations affecting application security.
• Communicate security-related issues and best practices to stakeholders at all levels of the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Minimum of 8 years of experience in application security, with at least 3 years in a leadership role.
• Strong knowledge of secure coding practices, application threats and vulnerabilities, and security frameworks.
• Proficiency in various security tools such as SAST, DAST, and IAST.
• Experience with cloud security and DevSecOps practices.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills, with the ability to influence and educate various audiences.

Technologies & Tools

The Director, Application Security Engineering will utilize a diverse array of technologies and tools, including but not limited to static application security testing (SAST) tools, dynamic application security testing (DAST) tools, web application firewalls (WAF), and various frameworks for secure coding. Familiarity with container security and security tools integrated into CI/CD pipelines is essential, as well as knowledge of cloud service providers and their security features.

Ideal Candidates

Ideal candidates for the role of Director, Application Security Engineering will possess a strong blend of technical expertise and leadership qualities. They should demonstrate a proactive approach to problem-solving and have an inherent passion for cybersecurity. Candidates should also embody excellent communication skills, with the capability to convey complex security concepts to non-technical stakeholders. Lastly, the ability to foster a collaborative environment that encourages innovation and security best practices is crucial for success in this position.