Lead AppSec Engineer — Drive Secure DevOps & Threat Modeling

Hobbsnews; Irving (TX); Hybrid; USD 116,000 - 170,000; Full time

Benefits offered by this job

401K with company match

Health, dental, vision insurance

PTO and holidays

Tuition reimbursement

Stock purchase plan

Career development programs

Job summary

Gartner IT is seeking a Lead Security Engineer to support AppSec and risk remediation across hybrid environments in Irving, TX and Stamford, CT. The role emphasizes vulnerability assessment, threat modeling, and automating security tool integrations.

You will work with Information Security partners and stakeholders to implement security controls that balance security, business needs, and user experience, while mentoring engineers and driving remediation efforts.

Qualifications

• 6–8 years in a Security Engineering role with DevSecOps, Cloud Security and AppSec.
• Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling.
• Formal experience with threat modeling.
• Experience leading projects and coordinating resources.

Responsibilities

• Collaborate with business stakeholders to design secure applications and remediate issues.
• Mentor engineers on threat modeling techniques.
• Triage and prioritize security risks, vulnerabilities, and exceptions in alignment with business impact.
• Coordinate orchestration, automation, and management of security technologies and platforms.
• Own day-to-day life cycle management including threat assessment and risk avoidance.
• Create meaningful reports showing impact to security posture.
• Define metrics to measure security controls effectiveness.

Skills

DevSecOps

Cloud Security

Application Security

Threat modeling

Automation

Leadership

Communication

Tools

Vulnerability scanning tools

AST platforms

Cloud tooling (AWS/Azure/GCP)

IaC / PaC tooling

CI/CD tooling

Job description

Gartner IT is seeking a Lead Security Engineer to support AppSec and risk remediation across hybrid environments in Irving, TX and Stamford, CT. The role emphasizes vulnerability assessment, threat modeling, and automating security tool integrations.

You will work with Information Security partners and stakeholders to implement security controls that balance security, business needs, and user experience, while mentoring engineers and driving remediation efforts.