Application Security Engineer 2
Core
Develop application security program roadmaps, maturity assessments, and strategic reports for leadership; identify and support remediation of vulnerabilities in third-party open-source components.
Role type
Senior IC application security engineer (strategy & consulting)
Builds
Application security program roadmaps, capability maturity models, and strategic plans
Domain
Application security / Software supply chain / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery
Required skills
Application security program development, maturity assessments, framework alignment (BSIMM/NIST SSDF/OWASP SAMM), open-source software security, Software Bill of Materials (SBOM) standards, vulnerability tracking, remediation support, secure SDLC practices, CI/CD pipeline security, code-level security controls, executive communication, client-facing presentation
Preferred skills
Consulting experience (Big Four/boutique), software supply chain risk management, AI/ML assurance, DevSecOps pipeline design, software development (Java/Python/C#), security certifications (CEH/CISSP/CSSLP/CISM)
