Hybrid CISO & Application Security Leader: AI & DevSecOps

CyberJobs.Com; Reston (VA); Hybrid; USD 164,000 - 222,000; Full time

Benefits offered by this job

Discretionary bonus

Stock awards

Job summary

Verisign is seeking an experienced application security leader to act as SME across development teams, guiding threat modeling, vulnerability assessments, and remediation. You will own the vulnerability management lifecycle with a focus on SCA, SAST/DAST, and secrets scanning, while coordinating remediation with engineering and leadership.

The role requires 10+ years in IT and 6+ years in application security assessments, with strong OWASP knowledge and experience securing modern architectures.

Qualifications

• 10+ years’ experience in Information Technology with hands-on development
• 6+ years conducting application security assessments using COTS/open-source tools
• Hands-on with software composition analysis, SAST/DAST and secrets scanning
• Experience leading vulnerability management programs with SLAs and executive reporting
• Strong knowledge of OWASP Testing Framework and OWASP Top 10
• Experience with modern software architectures (SPA, microservices, containers)
• Familiar with AI/LLM security risks and guidance
• Ability to manage multiple opportunities and teams independently
• Excellent communication and leadership for senior audiences

Responsibilities

• Serve as the application security SME for development teams through requirements, design, and architecture phases
• Lead vulnerability assessments and provide remediation guidance to engineering teams
• Own vulnerability management lifecycle across toolchain—SCA, SAST/DAST, secrets scanning
• Review Bug Bounty submissions and provide remediation guidance
• Track issues against SLAs and elevate overdue items to leadership
• Guide security testing integration into CI/CD pipelines
• Review third-party apps against internal security requirements
• Mentor junior engineers and analysts, provide feedback
• Contribute to security standards and best practices in the organization
• Assess AI-integrated apps for risks like prompt injection and data exposure

Skills

Application security

Software development

OWASP Top 10

Security testing tools

Vulnerability management

API security testing

Linux

CI/CD security

Communication leadership

Bug bounty programs

Tools

Burp Suite

Fortify

SCA platforms

Job description

Verisign is seeking an experienced application security leader to act as SME across development teams, guiding threat modeling, vulnerability assessments, and remediation. You will own the vulnerability management lifecycle with a focus on SCA, SAST/DAST, and secrets scanning, while coordinating remediation with engineering and leadership.

The role requires 10+ years in IT and 6+ years in application security assessments, with strong OWASP knowledge and experience securing modern architectures.