Hybrid App Security Compliance Lead: Drive Secure SDLC

SMBC Group; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Accommodations during candidacy

Job summary

SMBC Group is seeking a Senior Application Security Compliance Lead to strengthen our security program. You will help identify, prioritize, and address findings before production, working with engineers and security teams to improve secure development practices.

You will review code, communicate risks clearly, and guide remediation across a diverse technology environment, including SAST/DAST, container security, and secure SDLC adoption. Hybrid work options and accommodations are available.

Qualifications

• 5+ years of experience in application security, application penetration testing, or related cybersecurity discipline.
• Strong knowledge of SSDLC principles, OWASP Top 10, CWE, and common threats and mitigations.
• Experience with one or more programming languages such as C#, C++, Java, Python, or .NET technologies.
• Ability to develop remediation examples, automation scripts, and tooling to support cybersecurity initiatives.
• Experience integrating security controls within CI/CD pipelines to improve code quality and vulnerability detection.

Responsibilities

• Partner with development teams to review security findings and drive remediation of vulnerabilities.
• Monitor and support application security scanning programs (SAST, SCA, DAST, IAST) and container security assessments.
• Review code across languages and explain security risks and remediation approaches to technical and non-technical audiences.
• Collaborate with security and development teams to improve secure software practices and threat mitigation.
• Track remediation progress with vulnerability management teams and ensure SLA compliance.
• Create and deliver reports communicating security posture, trends, and remediation progress to leadership.
• Perform targeted manual validation and testing of security findings and penetration testing results as needed.
• Contribute to process improvements, documentation, automation, and program maturity.

Skills

Application security

SAST/DAST

SSDLC

CI/CD security

Programming languages

Container security

Jira/Confluence

Remediation scripting

Tools

Jira

Confluence

Job description

SMBC Group is seeking a Senior Application Security Compliance Lead to strengthen our security program. You will help identify, prioritize, and address findings before production, working with engineers and security teams to improve secure development practices.

You will review code, communicate risks clearly, and guide remediation across a diverse technology environment, including SAST/DAST, container security, and secure SDLC adoption. Hybrid work options and accommodations are available.