Product Security Lead - Hybrid NYC, DevSecOps & Cloud

Madison-Davis, LLC; New York (NY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Madison-Davis, LLC is seeking a hands-on Product Security Lead to embed security across application and data lifecycles. You will work with software engineering, platform, and data teams to strengthen secure development, automate security controls, and identify risk earlier in delivery processes.

The role spans application security, cloud security, data security, and AI-security initiatives. You will remain technically involved while helping engineering teams adopt stronger security practices,

Qualifications

• Hands-on threat-modeling and design-risk-assessment experience.
• Strong Secure SDLC and DevSecOps expertise.
• Experience delivering SAST/DAST and software composition analysis capabilities.
• Solid data-security knowledge and cloud-security experience across IaaS, PaaS, SaaS.

Responsibilities

• Embed security into application and data lifecycles.
• Advance secure-development and DevSecOps practices.
• Integrate automated security testing into CI/CD pipelines.
• Conduct threat modeling and application-design risk assessments.
• Deliver and improve SAST, DAST, and software composition analysis capabilities.
• Validate and prioritize security findings while reducing false positives.
• Address open-source and third-party dependency risk.
• Support security across cloud and data environments.
• Guide security practices for emerging AI-enabled applications.
• Partner with engineering, platform, and data teams to strengthen security ownership.

Skills

Application security

DevSecOps

Threat modeling

SAST/DAST

Data security

Cloud security

AI security

Communication

Hybrid NYC schedule

Job description

Madison-Davis, LLC is seeking a hands-on Product Security Lead to embed security across application and data lifecycles. You will work with software engineering, platform, and data teams to strengthen secure development, automate security controls, and identify risk earlier in delivery processes.

The role spans application security, cloud security, data security, and AI-security initiatives. You will remain technically involved while helping engineering teams adopt stronger security practices,