Lead AppSec Engineer
Core
Lead Security Engineer supporting Gartner's AppSec function, executing vulnerability assessments, threat modeling, and risk prioritization while engineering automation solutions.
Role type
Senior IC Application Security Engineer (Lead) (via careerplan.io/jobs/114772-lead-appsec-engineer-at-gartner)
Builds
Security tools, automation integrations, and secure application lifecycles for Gartner's internal platforms and client-facing solutions.
Domain
Enterprise Technology / Application Security / DevSecOps
Required skills
Vulnerability scanning, Application Security Testing (AST), Threat modeling, Cloud security (AWS/Azure/GCP), Infrastructure as Code (IaC), Policy as Code (PaC), Risk assessment, DevSecOps
Preferred skills
Penetration testing, Web application assessment, Scripting/Programming (Python, Java, etc.), SOC2/ISO/NIST frameworks
Technologies
AWS, Azure, GCP, CI/CD pipelines, Security orchestration platforms
Responsibilities
Execute daily vulnerability assessments and triage security risks; Mentor engineers on threat modeling; Coordinate automation of security technologies; Define metrics (KRIs) to measure security control effectiveness; Partner with stakeholders to remediate security issues in applications.
Seniority
Senior, hands-on IC with leadership responsibilities
