Lead Application Security

Job Summary

Grade Level (for internal use): 11

Responsibilities

• Perform application security assessments including SAST, SCA, DAST, API security, secrets detection, and secure code reviews.
• Support onboarding and operation of application security platforms and scanning solutions.
• Assist development teams in remediation of vulnerabilities and secure coding practices.
• Help integrate security controls into GitHub, Azure DevOps, Jenkins, and developer workflows.
• Support software supply chain security initiatives including dependency governance and artifact management.
• Assist with CI/CD pipeline security reviews and implementation of security controls.
• Perform threat modeling and security reviews for new applications and services.
• Analyze security findings and support risk-based prioritization.
• Contribute to development of standards, procedures, and technical guidance.
• Participate in incident investigations involving application or software supply chain security issues.
• Support cloud application security reviews across Azure, AWS, and GCP environments.
• Develop scripts and automation to improve security operations and developer experience.