Director of Application Security Engineering

TKO; New York (NY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

TKO is seeking a hands-on Director, Application Security Engineering to strengthen cybersecurity posture and partner with teams building software across web, mobile, data, and AI-enabled workflows. This role embeds security into delivery practices and improves how we prevent and remediate risk while communicating clearly with technical and non-technical stakeholders.

This Director will work across software engineering, platform, DevOps, architecture, QA, infrastructure, compliance, and security

Qualifications

• 5+ years in application security or related software security role.
• Experience working directly with engineering teams in fast-moving environments.
• Hands-on with SAST/SCA tooling such as SonarQube, Dependabot, GitHub Advanced Security, or similar.
• Ability to interpret code and provide actionable remediation guidance.
• Practical SSDLC and shift-left experience with automated review, threat modeling, and vulnerability management.
• Strong understanding of application and API security, including authN/authZ and data protection.
• Experience integrating security controls into CI/CD pipelines and developer workflows.
• Familiarity with cloud and modern delivery patterns (containers, IaC, Git-based workflows).
• Strong risk-based vulnerability triage and remediation decision-making.
• Ability to write clear guidance and technical documentation for diverse audiences.

Responsibilities

• Own and evolve application security practices across SSDLC with scalable, developer-aligned controls.
• Operate and improve SAST, SCA, secret scanning, code scanning, and CI/CD protections.
• Develop secure development enablement for citizen developers and AI-assisted development.
• Review vulnerabilities, validate findings, reduce noise, and drive remediation plans.
• Conduct threat modeling and security design reviews for new systems and APIs.
• Advise teams on secure coding, authentication, session management, secrets handling, and data protection.
• Improve security guardrails for build pipelines, containers, APIs, and third-party components.
• Mature risk-based vulnerability management across intake, validation, prioritization, and reporting.
• Support secure adoption of AI-assisted development and agentic systems, assessing risks and exposure paths.
• Develop standards, playbooks, reference architectures, and documentation; provide office-hour support.
• Track weaknesses and advise leadership on where to invest to reduce risk.
• Use AI responsibly to accelerate analysis while maintaining human judgment.

Skills

Application security

DevSecOps

Threat modeling

Vulnerability management

Secure SDLC

CI/CD security

Code review

AI security awareness

Cloud security

Automation

Tools

SonarQube

Dependabot

GitHub Advanced Security

CI/CD tooling

Job description

TKO is seeking a hands-on Director, Application Security Engineering to strengthen cybersecurity posture and partner with teams building software across web, mobile, data, and AI-enabled workflows. This role embeds security into delivery practices and improves how we prevent and remediate risk while communicating clearly with technical and non-technical stakeholders.

This Director will work across software engineering, platform, DevOps, architecture, QA, infrastructure, compliance, and security