Remote AVP, Application Security & DevSecOps

Cybersecurity Jobs; Blue Ash (OH); À distance; USD 172 000 - 258 000; Plein temps

Avantages offerts par ce poste

Healthcare

Certification support

Incentive programs

Résumé du poste

Ensemble RCM LLC is hiring an AVP, Application Security (DevSecOps) to build, run, and mature the organization’s application security program. This is a working, hands-on leadership role that combines secure SDLC strategy with vulnerability management and executive reporting.

You will lead a comprehensive AppSec and DevSecOps program, perform secure code reviews, threat modeling, and security architecture reviews while mentoring engineers and champions.

Qualifications

• 8+ years in application security or DevSecOps.
• 3+ years in a leadership or technical lead role.
• Certifications CSSLP, OSCP, GWAPT, or CISSP preferred.
• Familiarity with OWASP ASVS, OWASP Top 10, and NIST SSDF.
• Hands-on experience with SAST/DAST/SCA tools and tuning them.

Responsabilités

• Lead and mature an AppSec and DevSecOps program.
• Perform secure code reviews, threat modeling, and architecture reviews.
• Mentor application security engineers and embedded security champions.
• Design and tune the AppSec toolchain and integrate security gates into CI/CD pipelines.
• Own vulnerability management, triage, remediation SLAs, and executive reporting.
• Embed security requirements and threat modeling into product design (shift-left).
• Develop and maintain secure coding standards and DevSecOps playbooks.
• Manage third-party and open-source risk with software composition analysis.
• Report risk posture, metrics, and remediation trends to leadership.
• Participate in application-level security incident response and RCA.

Connaissances

Leadership

Communication

Independent work

Problem solving

Travel flexibility

Formation

CSSLP

OSCP

GWAPT

CISSP

Outils

SAST

DAST

SCA

Checkmarx

Veracode

Snyk

Semgrep

Fortify

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

AWS

Kubernetes

Description du poste

Ensemble RCM LLC is hiring an AVP, Application Security (DevSecOps) to build, run, and mature the organization’s application security program. This is a working, hands-on leadership role that combines secure SDLC strategy with vulnerability management and executive reporting.

You will lead a comprehensive AppSec and DevSecOps program, perform secure code reviews, threat modeling, and security architecture reviews while mentoring engineers and champions.