Head of Application Security & DevSecOps

Role Overview

The Head of

Application Security & DevSecOps is responsible for integrating security

into the organization's software development and technology delivery processes. This role

partners directly with Engineering to build security into the development

lifecycle rather than relying primarily on post-development security reviews.

Key

Responsibilities

• Own application and API security
• practices.
• Establish and mature the Secure
• SDLC.
• Conduct and facilitate threat
• modeling.
• Implement and manage SAST, DAST,
• SCA and secrets scanning capabilities.
• Integrate security controls into
• CI/CD pipelines.
• Manage application vulnerabilities
• and remediation.
• Address open-source, dependency
• and software supply-chain risk.
• Establish secure coding standards
• and developer security practices.
• Define security requirements for
• production access and deployments.
• Partner directly with U.S. and
• offshore Engineering teams.
• Improve developer security
• awareness and adoption.
• Automate application security
• testing and remediation workflows.
• Establish meaningful application
• security metrics and reporting.

Requirements

Candidate

Requirements

• 7+ years of application security,
• DevSecOps, software engineering or cybersecurity experience.
• Strong understanding of modern
• application, API and cloud architectures.
• Hands-on experience with CI/CD and
• application security tooling.
• Experience working directly with
• software engineering teams.
• Strong understanding of software
• supply-chain and dependency risk.
• Ability to translate security
• requirements into practical engineering solutions.
• Financial services, fintech or
• regulated-industry experience preferred.
• Remote- US Shift