Lead Application Security & DevSecOps Engineer

Gartner; Irving (TX); Hybrid; USD 116,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Ongoing mentorship and apprenticeship

Hybrid work environment

20+ PTO days + holidays

Medical, dental and vision insurance

401K with company match

Parental leave

Tuition reimbursement

Employee Stock Purchase Plan

Gartner Gives Charity Match

Job summary

Gartner IT is seeking a Lead Security Engineer to support our AppSec function across Gartner’s hybrid environments in Irving, TX or Stamford, CT. You will execute vulnerability assessments, collaborate with Information Security partners, and drive remediation with stakeholders while implementing security tools and automations to improve day-to-day AppSec operations.

You will mentor engineers on threat modeling, triage risks, and report on security posture.

Qualifications

• 6–8 years of experience in a Security Engineering role (DevSecOps, Cloud Security and AppSec).
• Experience leading projects and cross-functional initiatives.
• Formal threat modeling experience and ability to prioritize risk.

Responsibilities

• Collaborate with stakeholders to design secure applications and coordinate remediation.
• Mentor engineers on threat modeling techniques and secure coding practices.
• Triage and prioritize security risks and exceptions by business impact.
• Coordinate orchestration and management of security technologies and platforms.
• Lead day-to-day life cycle management: threat assessment, modeling and risk avoidance.
• Create actionable security reports showing impact to posture.
• Define metrics to measure control effectiveness via KRIs and security scorecards.

Skills

DevSecOps

Cloud Security

Application Security

Threat Modeling

CI/CD

Automation

Security Leadership

Tools

AWS

Azure

GCP

Job description

Gartner IT is seeking a Lead Security Engineer to support our AppSec function across Gartner’s hybrid environments in Irving, TX or Stamford, CT. You will execute vulnerability assessments, collaborate with Information Security partners, and drive remediation with stakeholders while implementing security tools and automations to improve day-to-day AppSec operations.

You will mentor engineers on threat modeling, triage risks, and report on security posture.