AppSec Engineering Lead — Hybrid

Gartner; Dolphin Cove (CT); Hybrid; USD 116,000 - 170,000; Full time

Benefits offered by this job

Generous PTO

401K with match

Stock Purchase Plan

Tuition reimbursement

Health insurance

Work-from-home flexibility

Parental leave

Employee assistance program

Job summary

Gartner IT is seeking a Lead Security Engineer to support its AppSec function in a hybrid role across Irving, TX or Stamford, CT centers. You will execute vulnerability assessments, collaborate with partners, and drive remediation with stakeholders while shaping the security roadmap.

You will mentor engineers in threat modeling, triage risks, and orchestrate security tooling. The role emphasizes automation, data-driven risk decisions, and strong cross-team collaboration.

Qualifications

• Experience with vulnerability scanning technologies and AST platforms.
• Formal experience with threat modeling.
• Experience leading projects, initiatives, and resources.
• Cloud experience (AWS, Azure, GCP).
• Infrastructure as Code (IaC) and Policy as Code (PaC) concepts.

Responsibilities

• Collaborate with stakeholders to design secure applications and remediate issues.
• Mentor engineers on threat modeling techniques.
• Triage and prioritize security risks and exceptions by business impact.
• Coordinate orchestration, automation, and management of security technologies and platforms.
• Own day-to-day lifecycle management, including threat assessment and risk avoidance.
• Create actionable reports showing impact to the security posture.
• Define metrics to measure effectiveness of security controls via KRIs and scorecards.
• Serve as SME for Application Security and triage CI/CD issues.
• Evaluate requirements to implement tools, processes, and technologies to improve security posture.
• Use data to drive prioritization and influence roadmap decisions.

Skills

Vulnerability scanning

Threat modeling

Cloud security

DevSecOps

CI/CD security

Automation scripting

Communication skills

Tools

AWS

Azure

GCP

Terraform

Kubernetes

Job description

Gartner IT is seeking a Lead Security Engineer to support its AppSec function in a hybrid role across Irving, TX or Stamford, CT centers. You will execute vulnerability assessments, collaborate with partners, and drive remediation with stakeholders while shaping the security roadmap.

You will mentor engineers in threat modeling, triage risks, and orchestrate security tooling. The role emphasizes automation, data-driven risk decisions, and strong cross-team collaboration.