Director, Application Security — Lead Secure SDLC

TKO; New York (NY); Hybrid; USD 143,000 - 190,000; Full time

Job summary

TKO Group Holdings, Inc. is seeking a hands-on Director, Application Security Engineering to strengthen our cybersecurity posture, partnering with teams across web, mobile, data, and AI-enabled workflows.

This role will embed security into delivery practices, mature SSDLC, and develop guardrails while collaborating across engineering, DevOps, architecture, QA, and compliance. It is a hybrid role with 3 in-office days per week, preferably near NYC, Stamford, Orlando, Austin, or Las Vegas.

Qualifications

• 5+ years of hands-on experience in application security, product security, or related field.

Responsibilities

• Own and evolve application security practices across the SSDLC with scalable, developer‑aligned controls.
• Operate and improve SAST, SCA, secret scanning, code scanning, and repository protections across CI/CD.
• Develop secure development enablement for citizen developers, AI-assisted development, and tooling guidance.
• Review vulnerabilities, validate findings, and drive risk-based remediation plans.
• Conduct threat modeling and security design reviews for new systems and high-risk workflows.
• Advise teams on secure coding, authN/authZ, secrets handling, logging, and data protection.
• Improve security guardrails for build pipelines, containers, APIs, and third-party components.
• Mature risk-based vulnerability management across intake, validation, and remediation guidance.
• Support secure adoption of AI-assisted development and agentic systems with risk assessments.
• Develop playbooks, architectures, and documentation to improve consistency without slowing teams.
• Track weaknesses and advise on where engineering investment reduces risk most.
• Use AI to accelerate analysis, triage, and security reviews while maintaining human judgment.

Skills

Application security

DevSecOps

Security engineering

Threat modeling

Vulnerability management

SSDLC

CI/CD pipelines

AI security

Code review

Security guidance

Tools

SonarQube

Dependabot

GitHub

GitHub Advanced Security

Job description

TKO Group Holdings, Inc. is seeking a hands-on Director, Application Security Engineering to strengthen our cybersecurity posture, partnering with teams across web, mobile, data, and AI-enabled workflows.

This role will embed security into delivery practices, mature SSDLC, and develop guardrails while collaborating across engineering, DevOps, architecture, QA, and compliance. It is a hybrid role with 3 in-office days per week, preferably near NYC, Stamford, Orlando, Austin, or Las Vegas.