Lead Application Security Engineer / Security Generalist - Only W2

Title: Lead Application Security Engineer / Security Generalist Location: Atlanta, GA (Hybrid - 3 days a week onsite) - Locals highly preferred Job Type: W2 Contract Role Overview

• As a Security Champion in development teams, the candidate will leverage his/her wide security expertise and influence to enable business line owners of a variety of applications to comply with the Client s security policies and guidelines.
• The position requires a multi-faceted resource with expertise in Information Security and Enterprise Architecture with strong people skills, who can lead security remediation efforts. The candidate must be able to influence leaders internally, maintain productive and cordial relationships, and stay organised in managing parallel efforts.
• The candidate must be local to Atlanta and work onsite when needed. The expectation is a 3-day onsite hybrid position, typically, but not exclusively, Tuesday through Thursday.

Responsibilities

• Lead application security remediation efforts across a broad portfolio of applications.
• Support development teams in Vulnerability Management, Security Incident Management, Risk Management, and Audit processes
• Collaborate with stakeholders to understand security policy requirements and translate them into technical guidance and an action plan for application owners
• Act as a liaison between the security/EA organisation and its business stakeholders
• Collaborate with and translate policy from governance groups at the parent company, Germany-based Client
• Perform security assessments and audits on applications
• Educate and inform employees on security best practices.
• Ensure compliance with industry regulations and standards (e.g., GDPR, HIPAA).

Requirements

• Wide security expertise, Application Security, and exposure to Solution Architecture. CISSP highly desired
• It is generally more application security-focused, Lead Engineer level, but also has some compliance and risk assessment with this one. They typically like security generalists on their team