Lead AppSec Engineer - Hybrid, Remote Options

Gartner; Irving (TX); Híbrido; USD 116.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

PTO & Holidays

401(k) match

Employee Stock Purchase Plan

Health, dental, vision insurance

Hybrid work environment

Descripción de la vacante

Gartner IT is seeking a Lead Security Engineer to support Gartner’s AppSec function. You will execute vulnerability assessments, collaborate with security partners, and drive remediation across business units while balancing security, business, and user experience.

You will lead threat modeling, automate security tool integrations, and provide education to engineering teams. This role requires strong communication and a strategic mindset with cloud security and DevSecOps experience.

Formación

• 7+ years in a Security Engineering role with DevSecOps, Cloud Security and AppSec.
• Strong independent thinking, problem solving, and ability to adapt to changing priorities.
• Experience leading projects and teams, with risk-based decision making.

Responsabilidades

• Collaborate with stakeholders to design secure applications and remediate issues.
• Mentor engineers on threat modeling techniques.
• Triage and prioritize security risks, vulnerabilities, and exceptions.
• Coordinate orchestration and management of security tech and platforms.
• Own day-to-day lifecycle management including threat modeling and risk avoidance.
• Create actionable reports showing impact to security posture.
• Define metrics to measure effectiveness of controls (KRIs, security scorecards).
• Act as SME for Application Security and point of contact for critical issues.

Conocimientos

DevSecOps

Cloud Security

Application Security

Threat Modeling

Vulnerability Scanning

CI/CD Security

Herramientas

AWS

Azure

GCP

Descripción del empleo

Gartner IT is seeking a Lead Security Engineer to support Gartner’s AppSec function. You will execute vulnerability assessments, collaborate with security partners, and drive remediation across business units while balancing security, business, and user experience.

You will lead threat modeling, automate security tool integrations, and provide education to engineering teams. This role requires strong communication and a strategic mindset with cloud security and DevSecOps experience.