Lead Application Security - DevSecOps & AI Assurance
Core
Lead application security and DevSecOps initiatives, integrating security into CI/CD pipelines, managing vulnerability assessments, and conducting software assurance including third-party analysis and binary-level inspection.
Role type
Senior IC application security engineer (DevSecOps & AI Assurance)
Builds
Secure software delivery pipelines and validated application trust frameworks
Domain
Financial services / Application Security
Required skills
SAST/DAST, secure SDLC, GitHub Advanced Security, software composition analysis (SCA), reverse engineering, threat modeling, vulnerability management, API security, WAF policy management, threat intelligence integration, penetration test coordination
Preferred skills
Binary analysis, open-source ecosystem expertise, software supply chain security, trust validation frameworks
Technologies
GitHub, CodeQL, Dependabot, OWASP ZAP, CI/CD, WAF, API
Responsibilities
Embed security controls into CI/CD pipelines using GitHub workflows and automation tools. Conduct SAST and DAST using approved tools such as CodeQL, Dependabot, and OWASP ZAP. Carry out manual and automated code reviews, identify vulnerabilities, and support remediation. Assess third-party software through source code reviews and compiled-binary analysis. Help establish and operate a software trust and reputation framework for application onboarding. Conduct API security assessments and integrate monitoring tools to protect application endpoints. Coordinate penetration testing efforts.
Seniority
Senior, hands-on IC
