Director, App Security Engineering — Hybrid, AI-Enabled

World Wrestling Entertainment, Inc.; New York (NY); Hybrid; USD 142,500 - 190,000; Full time

Benefits offered by this job

Health care

Retirement plan

Paid time off

Job summary

TKO Group Holdings, Inc. is seeking a hands-on Director of Application Security Engineering to embed security into software delivery across web, mobile, data, and AI-enabled workflows.

The role collaborates with engineering, DevOps, architecture, and security teams to mature SSDLC practices and guardrails, emphasizing scalable, developer-friendly controls. The role requires 5+ years in application security and experience with SAST/SCA tools, threat modeling, and secure CI/CD integration;

Qualifications

• 5+ years of hands-on experience in application security, product security, DevSecOps, or related role.
• Proven experience working directly with engineering teams in fast-paced environments.
• Hands-on experience configuring and operating SAST, SCA, and related tooling.
• Ability to interpret code and provide concrete remediation guidance to engineers.
• Experience with SSDLC, threat modeling, security design reviews, and vulnerability management.
• Strong understanding of application/API security, authN/authZ, secrets handling, and data protection.
• Experience integrating security controls into CI/CD pipelines and developer workflows.
• Familiarity with cloud and modern software delivery patterns (containers, IaC, Git-based workflows).
• Strong judgment in vulnerability triage balancing severity and business impact.
• Ability to write clear technical guidance and documentation.

Responsibilities

• Own and evolve application security practices across SSDLC with shift-left controls.
• Operate and improve SAST, SCA, secret scanning, and related protections across CI/CD pipelines.
• Develop secure development enablement for citizen developers and AI-assisted development.
• Review vulnerabilities, validate findings, and drive risk-based remediation plans.
• Conduct threat modeling and security design reviews for new systems and APIs.
• Advise teams on secure coding, authentication/authorization, and data protection.
• Improve security guardrails for build pipelines, containers, and 3rd-party components.
• Mature risk-based vulnerability management from intake to remediation guidance.
• Support secure adoption of AI-assisted development and agentic systems.

Skills

Application security

DevSecOps

SSDLC

Threat modeling

Vulnerability management

CI/CD security

Cloud security

AI security

Security review

Code review

Tools

SonarQube

Dependabot

GitHub

GitHub Advanced Security

Job description

TKO Group Holdings, Inc. is seeking a hands-on Director of Application Security Engineering to embed security into software delivery across web, mobile, data, and AI-enabled workflows.

The role collaborates with engineering, DevOps, architecture, and security teams to mature SSDLC practices and guardrails, emphasizing scalable, developer-friendly controls. The role requires 5+ years in application security and experience with SAST/SCA tools, threat modeling, and secure CI/CD integration;