Head of Application Security & DevSecOps

Role Overview

The Head of
Application Security & DevSecOps is responsible for integrating security
into the organization's software development and technology delivery processes. This role
partners directly with Engineering to build security into the development
lifecycle rather than relying primarily on post-development security reviews.

Key
Responsibilities

• Own application and API security
  practices.
  
• Establish and mature the Secure
  SDLC.
  
• Conduct and facilitate threat
  modeling.
  
• Implement and manage SAST, DAST,
  SCA and secrets scanning capabilities.
  
• Integrate security controls into
  CI/CD pipelines.
  
• Manage application vulnerabilities
  and remediation.
  
• Address open-source, dependency
  and software supply-chain risk.
  
• Establish secure coding standards
  and developer security practices.
  
• Define security requirements for
  production access and deployments.
  
• Partner directly with U.S. and
  offshore Engineering teams.
  
• Improve developer security
  awareness and adoption.
  
• Automate application security
  testing and remediation workflows.
  
• Establish meaningful application
  security metrics and reporting.
  

Requirements

Candidate
Requirements

• 7+ years of application security,
  DevSecOps, software engineering or cybersecurity experience.
  
• Strong understanding of modern
  application, API and cloud architectures.
  
• Hands-on experience with CI/CD and
  application security tooling.
  
• Experience working directly with
  software engineering teams.
  
• Strong understanding of software
  supply-chain and dependency risk.
  
• Ability to translate security
  requirements into practical engineering solutions.
  
• Financial services, fintech or
  regulated-industry experience preferred.
  
• Remote- US Shift