Director, Application Security Engineering (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via eFinancialCareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Director of Application Security Engineering will play a critical role in establishing and leading secure software development practices across the organization. This position entails developing and implementing security strategies, overseeing security architecture, and fostering a culture of security-first mindset among engineering teams. The successful candidate will coordinate with multiple stakeholders to ensure the alignment of security objectives with business goals while managing a team of security engineers to fortify the integrity and privacy of applications deployed by the company.

Job Responsibilities

• Lead the development and implementation of an enterprise-level application security program.
• Oversee the application security lifecycle, including vulnerability assessments, threat modeling, and incident response.
• Collaborate with engineering and product teams to integrate security measures into software development processes.
• Monitor and report on application security metrics to gauge the effectiveness of security initiatives.
• Ensure adherence to industry regulations and standards concerning application security.
• Conduct training sessions and workshops to promote security awareness among engineering teams.
• Participate in hiring and developing a skilled team of application security professionals.
• Stay abreast of emerging security technologies and industry trends to proactively address potential security risks.

Qualifications

• Master’s degree in Computer Science, Information Security, or a related field.
• Minimum of 8 years of experience in application security or related security fields.
• Proven experience in leading application security teams or initiatives, preferably in a managerial or director-level role.
• Extensive knowledge of secure coding practices, application security testing methodologies, and security assessment tools.
• Experience with security frameworks such as OWASP, NIST, or ISO/IEC 27001.
• Exceptional problem-solving skills and the ability to think strategically about security challenges.
• Excellent communication and interpersonal skills, capable of working collaboratively across departments.
• Relevant certifications such as CISSP, CISM, or CSSLP are a plus.

Technologies & Tools

The Director of Application Security Engineering will utilize a variety of technologies and tools to safeguard application integrity. This includes security frameworks and standards such as OWASP, threat modeling tools, static and dynamic application security testing (SAST/DAST) tools, secure coding tools, and vulnerability management systems. Proficiency in cloud security solutions and familiarity with CI/CD tools will also be integral to ensuring security is embedded throughout the development pipeline. Familiarity with programming languages like Python, Java, or C# will also be beneficial for effective communication with development teams.

Ideal Candidates

Ideal candidates for the Director of Application Security Engineering position will exhibit a strong blend of technical expertise and leadership capabilities. They will possess a proactive and strategic mindset, allowing them to anticipate security challenges and innovate solutions. A commitment to fostering teamwork and a passion for mentoring others will be essential. Furthermore, they should have a proven ability to balance technical detail with business objectives, ensuring that security is effectively integrated into the software development lifecycle without compromising project delivery timelines.