- New York, New York, United States
- $130K–$190K per year
- 6+ years
Lead complex application security assessments and drive integration of security controls across the enterprise.
Compensation
S&P Global states that the anticipated base salary range for this position is $130 000 to $190 000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.
Responsibilities
- Lead complex application security assessments across multiple testing methodologies — including SAST, SCA, DAST, API security, secrets detection, and threat modeling — to identify and mitigate security vulnerabilities across the enterprise.
- Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms, implementing risk-based quality gates that enhance secure coding practices.
- Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services, providing strategic guidance on secure architecture decisions.
- Design and implement AI-enabled Application Security capabilities — including custom tools, agents, and automations — that improve security testing, triage, and remediation while meeting enterprise governance standards.
- Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks and establish scalable security controls across the SDLC.