Director, Application Security Engineering (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by myGwork - LGBTQ+ Business Community, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Director of Application Security Engineering at myGwork will play a pivotal role in establishing and spearheading our application security strategy. This position involves developing robust security frameworks and overseeing the implementation of security measures across all applications. The successful candidate will collaborate with multiple teams to integrate security best practices into the software development lifecycle while ensuring compliance with industry standards. The Director will lead a team of talented professionals, foster a culture of security awareness, and utilize data-driven insights to proactively mitigate risks associated with application vulnerabilities.

Job Responsibilities

• Lead the application security engineering team in developing and implementing a comprehensive application security program.
• Collaborate with software development teams to integrate security throughout the software development lifecycle.
• Conduct regular security assessments, code reviews, and vulnerability assessments on web and mobile applications.
• Identify, prioritize, and remediate security vulnerabilities in applications and APIs.
• Develop and deliver training programs to promote secure coding practices and enhance security awareness among development teams.
• Stay abreast of emerging security threats, trends, and technologies to maintain an effective security posture.
• Work with cross-functional teams to align application security initiatives with overall organizational goals.
• Provide strategic direction and oversight for incident response related to application security breaches.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field; Master’s degree preferred.
• Minimum of 8 years of experience in application security, with at least 3 years in a leadership role.
• Strong knowledge of security principles, threat modeling, and secure software development practices.
• Proficiency in security assessment tools, methodologies, and frameworks such as OWASP, NIST, and SANS.
• Experience with cloud security practices in environments such as AWS, Azure, or Google Cloud.
• Excellent analytical, problem-solving, and communication skills.
• Relevant security certifications, such as CISSP, CEH, or CSSLP, are highly desirable.

Technologies & Tools

The Director of Application Security Engineering will employ a variety of technologies and tools to ensure effective application security. This includes using vulnerability scanning tools such as Snyk, Veracode, or Fortify, as well as CI/CD pipeline integrations for automated security testing. Familiarity with source code management tools like Git, project management software, and incident response platforms will also be crucial. Knowledge of development frameworks and programming languages such as Java, Python, Ruby, or .NET is essential for executing comprehensive code reviews and security assessments.

Ideal Candidates

The ideal candidate for this position will possess a strong blend of technical expertise and leadership capabilities, with a proactive approach to application security challenges. They will exhibit excellent interpersonal skills, enabling effective collaboration across various departments and fostering a culture of security awareness. An adaptable mindset, with the ability to navigate fast-paced environments and evolving security landscapes, is essential. Candidates should demonstrate a commitment to diversity and inclusion, aligning with myGwork's mission to support the LGBTQ+ community and promote a welcoming workplace.