Director, Secure App Engineering & AI Security

Ultimate Fighting Championship; New York (NY); Hybrid; USD 143,000 - 190,000; Full time

Job summary

TKO Group Holdings, Inc. seeks a Director of Application Security Engineering to harden software across web, mobile, data, and AI-enabled workflows. You will embed security into delivery, mature SSDLC, and drive risk-based remediation while balancing speed and security.

You will lead security guidance across engineering, DevOps, and QA, implement scalable guardrails, and support citizen developers with practical tooling and guidance, including AI security considerations.

Qualifications

• 5+ years in application security, product security, DevSecOps, or a similar role.
• Experience working with engineering teams in fast-paced delivery environments.
• Hands-on with SAST, SCA and related tooling; ability to translate findings into remediation guidance.
• Strong SSDLC/shift-left experience, threat modeling, vulnerability management, and design reviews.
• Knowledge of authN/authZ, secrets handling, data protection, and software supply-chain basics.

Responsibilities

• Own and evolve SSDLC security practices with scalable, developer-aligned controls.
• Operate and improve SAST, SCA, secret scanning, and CI/CD security tooling.
• Provide practical guidance for tooling, identity, observability, and enterprise standards.
• Review vulnerabilities, drive risk-based remediation, and reduce noise.
• Lead threat modeling and security design reviews for new systems and APIs.
• Advise teams on secure coding, session management, encryption, and dependency hygiene.
• Improve build pipelines, containers, APIs, and deployment security across environments.
• Mature vulnerability management and reporting with risk-based guidance.
• Support AI-assisted development adoption while assessing trust and data exposure paths.
• Develop standards, playbooks, and reference architectures to improve consistency.
• Track weaknesses and quantify where engineering investment reduces risk most.

Skills

SSDLC

Threat modeling

DevSecOps

CI/CD security

AI security

Security engineering

Cloud security

Vulnerability management

Tools

SonarQube

Dependabot

GitHub

GitHub Advanced Security

Job description

TKO Group Holdings, Inc. seeks a Director of Application Security Engineering to harden software across web, mobile, data, and AI-enabled workflows. You will embed security into delivery, mature SSDLC, and drive risk-based remediation while balancing speed and security.

You will lead security guidance across engineering, DevOps, and QA, implement scalable guardrails, and support citizen developers with practical tooling and guidance, including AI security considerations.