Application Security Leader - AI & DevSecOps

Auxis LLC; Bogotá; Presencial; COP 378.561.000 - 567.841.000; Jornada completa

Descripción de la vacante

Auxis LLC is seeking an experienced Application Security Manager in Bogotá to lead security initiatives across the organization. You will own Veracode, drive DAST, and champion Secure SDLC and DevSecOps with Product, Engineering, AI, and Security teams to embed security from design through production.

Experience with SAST/DAST/SCA and OWASP ASVS is required. The role requires strong stakeholder management and the ability to communicate security risk to technical and executive stakeholders.

Formación

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 8+ years of experience in Cybersecurity, Application Security, Product Security, Information Security, or a related field.
• Strong experience in Application Security / Product Security and Secure SDLC practices.
• Hands-on experience with SAST, DAST, and SCA solutions.
• Strong experience with Veracode or a comparable application security platform.
• Experience integrating application security tools with CI/CD and DevSecOps pipelines.
• Strong understanding of application vulnerabilities, vulnerability triage, remediation, and risk management.
• Experience conducting security architecture and application design reviews.
• Experience with OWASP standards, particularly OWASP ASVS.
• Experience working directly with Product and Engineering teams throughout the software lifecycle.
• Experience conducting third-party/SaaS security assessments.
• Strong understanding of modern application and cloud architectures.
• Experience with AI security assessments, AI governance, or AI risk management is highly desirable.
• Strong stakeholder management, communication, and influencing skills.

Responsabilidades

• Own and manage the organization's Veracode platform, including onboarding, configuration, and support.
• Drive application onboarding and establish scanning requirements by risk.
• Integrate security testing into CI/CD and DevSecOps processes.
• Review and triage security findings; provide remediation guidance.
• Coordinate DAST activities across the application portfolio and validate findings.
• Define remediation strategies with Product and Engineering teams.
• Develop and maintain security onboarding, scanning, remediation processes and dashboards.
• Lead third-party SaaS security assessments and vendor interactions.
• Support security governance, risk reporting, and security metrics.
• Drive Secure SDLC adoption across Product and Engineering teams.
• Provide security consultation from architecture through production and operations.
• Lead AI security assessments and governance for AI-enabled applications.

Conocimientos

Application Security

Veracode

CI/CD

DevSecOps

Vulnerability management

AI security

OWASP ASVS

SAST

DAST

SCA

Security architecture

Stakeholder management

Leadership

Educación

Bachelor's degree in Computer Science / IT / Cybersecurity

Herramientas

Veracode

CI/CD tooling

Descripción del empleo

Auxis LLC is seeking an experienced Application Security Manager in Bogotá to lead security initiatives across the organization. You will own Veracode, drive DAST, and champion Secure SDLC and DevSecOps with Product, Engineering, AI, and Security teams to embed security from design through production.

Experience with SAST/DAST/SCA and OWASP ASVS is required. The role requires strong stakeholder management and the ability to communicate security risk to technical and executive stakeholders.