Application Security Lead

About the role

The Application Security Lead is responsible for overseeing and advancing the organization's application security program. This role involves conducting threat modeling, secure design reviews, manual code reviews, and security assessments for various application types. The lead will design and implement security testing tools within CI/CD pipelines, coordinate penetration tests, manage vulnerabilities, and maintain secure coding standards. Additional responsibilities include managing software supply chain security, running the security champions program, supporting incident response, and reporting on application security metrics. The ideal candidate will have significant experience in application security, deep knowledge of security standards and vulnerabilities, proficiency in major programming languages, and hands-on experience with security tools and cloud environments.