Lead Application Security - DevSecOps & AI-Driven Software Assurance
Core
Lead application security initiatives across the DevOps lifecycle, integrating security into CI/CD pipelines, managing vulnerability assessments, and performing advanced software assurance including third-party analysis and binary-level inspection.
Role type
Senior IC Application Security Engineer (DevSecOps & Software Assurance)
Builds
Secure CI/CD pipelines, validated software supply chain, and trusted application environments
Domain
Financial Services / Application Security / DevSecOps
Required skills
SAST/DAST tooling, GitHub Advanced Security, secure SDLC, threat modeling, binary analysis/reverse engineering, software composition analysis (SCA), API security, penetration test coordination, threat intelligence integration
Preferred skills
Experience with open-source ecosystems, software trust frameworks, WAF policy management
Technologies
GitHub, CodeQL, Dependabot, OWASP ZAP, CI/CD automation tools
Responsibilities
Embed security controls into CI/CD pipelines; conduct SAST/DAST and manual code reviews; perform third-party software and binary analysis; manage vulnerability tracking and remediation; coordinate penetration testing; integrate threat intelligence into risk assessments
Seniority
Senior, hands-on IC
