Head of Application Security
Posted 22 days ago · 0 applicants
Saving, applying or scoring takes a few seconds to set up your free account.
The role in plain words
This role involves leading the application security team and reporting directly to an R&D VP. The successful candidate will develop and implement a Secure Software Development Lifecycle framework, oversee security practices in CI/CD pipelines, and conduct threat modeling. Additionally, they will collaborate with development teams to ensure secure coding practices and manage security automation tools.
- Bachelor's degree in Computer Science, Information Security, or a related field
- Minimum of 7 years of experience in application security
- At least 3 years of experience in a leadership role
- Proven experience in implementing and managing SSDLC frameworks
- In-depth knowledge of security frameworks and methodologies
- Relevant certifications such as CISSP, CISM, or CSSLP
Extracted from the job description · kept up to date automatically
Who this suits
This role suits experienced security leaders with at least 7 years of application security experience, including 3 years in a leadership position, who have strong knowledge of SSDLC frameworks and programming languages like Java, Python, or C#. It is less ideal for those without prior leadership experience or those lacking a background in managing security tools in high-scale environments.
Full job description
Original listing · kept for referenceWe are seeking a highly skilled and experienced Head of Application Security to join our dynamic team. This role is pivotal in driving the security of our software development lifecycle and ensuring the robustness of our applications against potential threats. The ideal candidate will have a strong background in secure software development practices, including SSDLC implementation, and a deep understanding of security risks & tools. This position reports directly to an R&D VP.
Major Responsibilities
• Lead the application security team, providing strategic direction and mentorship.
• Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework.
• Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails.
• Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities.
• Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity.
• Implement and manage security automation tools and processes to enhance the efficiency of security operations.
• Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture.
• Provide expert guidance on security architecture and design for new and existing applications.
• Lead incident response efforts related to application security breaches and vulnerabilities.
• Foster a culture of security awareness and continuous improvement within the organization.
Desired Background
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 7 years of experience in application security, with at least 3 years in a leadership role.
• Proven experience in implementing and managing SSDLC frameworks.
• In-depth knowledge of security frameworks and methodologies.
• Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten).
• Proficiency in programming languages such as Java, Python, C#, or similar.
• Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment.
• Excellent communication and leadership skills, with the ability and passion to drive change across the organization.
• Relevant certifications such as CISSP, CISM, or CSSLP are desirable.
• Proven experience in a similar role at another leading software development company.
Questions about this role
- This listing did not state a salary. We only show pay when the employer publishes it.
- Bachelor's degree in Computer Science, Information Security, or a related field, Minimum of 7 years of experience in application security, At least 3 years of experience in a leadership role, Proven experience in implementing and managing SSDLC frameworks, In-depth knowledge of security frameworks and methodologies