Associate Director - Application Security
Core
Securing enterprise artifact and dependency management platforms, CI/CD pipelines, and integrating AI/ML security controls into developer workflows.
Role type
DevSecOps Engineer (Artifact Management & Supply Chain Security)
Builds
Trusted artifact repositories, secure CI/CD pipelines, and AI/ML security governance frameworks.
Domain
Software Supply Chain Security, DevSecOps, Generative AI Security
Deliverable
production ML models | infrastructure | product features
Required skills
JFrog Artifactory architecture, package curation models, CI/CD pipeline integration (GitHub, Jenkins, Azure DevOps), Python/Groovy/Terraform scripting, AI/ML security risk mitigation (prompt injection, data poisoning), waiver workflow design, cloud security (Azure/AWS/GCP), SDLC/DevSecOps operating models
Preferred skills
Hands-on AI/ML component integration, Responsible AI governance frameworks, AI security scanning tools
Technologies
JFrog Artifactory, GitHub, Jenkins, Azure DevOps, Python, Groovy, Terraform, Azure, AWS, GCP
Responsibilities
Design and operate enterprise artifact repository platforms; define package curation and trust models; implement waiver workflows for dependencies; integrate AI/ML security controls into CI/CD pipelines; enforce artifact immutability and provenance; develop policy-as-code for artifact lifecycle management; support security incident investigations for supply chain risks.
Seniority
Mid-level IC (3-6 years experience)
