Director, Secure SDLC & DevSecOps Strategy

The Western Union Company; Austin (TX); Hybrid; USD 200,000 - 215,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Parental Leave

Job summary

The Western Union Company seeks an experienced Director of Application Security to lead strategy, development, and execution of our Application Security program.

Reporting to the VP of Security Operations, this leader will mature secure-by-design practices across the SDLC, collaborating with Engineering, Product, Architecture, DevOps, Cloud Engineering, and Security Operations to embed security in every development phase.

Qualifications

• 10+ years of progressive experience in Application Security or related fields.
• 5+ years leading Application Security teams.
• Experience maturing programs in enterprise technology settings.
• Experience partnering with software engineering in Agile/DevSecOps.
• Strong knowledge of secure-by-design within SDLC and CI/CD.

Responsibilities

• Develop and execute enterprise Application Security strategy aligned with business goals.
• Lead SSDLC and set security requirements for development teams.
• Oversee SAST/DAST/SCA/IAST, container and IaC security testing.
• Embed automated security controls in CI/CD and improve vulnerability management.
• Define CTEM scope and consolidate exposure signals across assets.
• Provide security guidance for cloud-native architectures and microservices.
• Build strong partnerships with engineering leadership and drive security champions.
• Lead, mentor, and develop a high-performing security team.

Skills

Application Security

Security Leadership

Threat Modeling

DevSecOps

Secure SDLC

Cloud Security

OWASP Top 10

Security Metrics

Education

Bachelor's degree in CS/Cybersecurity/Engineering or related field

Advanced degree preferred

Tools

SAST

DAST

SCA

IAST

Penetration Testing Coordination

Job description

The Western Union Company seeks an experienced Director of Application Security to lead strategy, development, and execution of our Application Security program.

Reporting to the VP of Security Operations, this leader will mature secure-by-design practices across the SDLC, collaborating with Engineering, Product, Architecture, DevOps, Cloud Engineering, and Security Operations to embed security in every development phase.