Sr Application Security Engineer
Core
Senior Security Engineer supporting Gartner's AppSec function, executing vulnerability assessments, collaborating on remediation, and engineering automation solutions.
Role type
Senior IC application security engineer (DevSecOps)
Builds
Security tools, automation solutions, and integrations for AppSec responsibilities
Domain
Cybersecurity / Application Security / Cloud Security
Required skills
vulnerability scanning, Application Security Testing (AST), threat modeling, Cloud Security (AWS/Azure/GCP), Infrastructure as Code (IaC), Policy as Code (PaC), risk assessment, security tool orchestration
Preferred skills
DevSecOps, leading projects, independent critical thinking, automation engineering
Technologies
AWS, Azure, GCP, vulnerability scanning tools, AST platforms, CI/CD tools
Responsibilities
Execute daily vulnerability assessments; collaborate with stakeholders on risk remediation; engineer automation solutions and security tool integrations; mentor engineers on threat modeling; triage and prioritize security risks; define and implement security metrics (KRIs/scorecards); serve as SME for AppSec and CI/CD security issues.
Seniority
Senior, hands-on IC
