Remote AVP, AppSec & DevSecOps Leader

Ensemble Health Partners; Kentucky; Hybrid; USD 172,000 - 258,000; Full time

Benefits offered by this job

Remote work

Career growth

Job summary

Ensemble Health Partners seeks an experienced AVP, Application Security (DevSecOps) to lead and grow the security program across SDLC, tooling, and vulnerability management. You will mentor engineers, perform architecture reviews, and drive secure design practices with product and infrastructure teams.

The role combines hands-on security work with leadership, requires 8+ years in security domains and 3+ years in leadership, and offers remote work within the United States with travel as needed.

Qualifications

• 8+ years of experience in application security, secure software development, or DevSecOps.
• 3+ years in a leadership or technical lead capacity, while remaining hands-on.
• Relevant certification preferred (e.g., CSSLP, OSCP, GWAPT, CISSP).
• Familiarity with OWASP ASVS, OWASP Top 10, and NIST SSDF.
• Hands-on experience with SAST, DAST, and SCA tools and ability to configure, tune, and troubleshoot them.

Responsibilities

• Build, lead, and mature a comprehensive AppSec and DevSecOps program across secure SDLC and tooling.
• Mentor application security engineers and embedded security champions.
• Perform secure code reviews, threat modeling, and security architecture reviews.
• Design, implement, and tune the AppSec toolchain and integrate security gates into CI/CD.
• Own the application vulnerability management program, including triage and remediation SLAs.
• Partner with engineering and product teams to embed security requirements early in design.
• Develop and maintain secure coding standards and DevSecOps playbooks.
• Report on risk posture and remediation trends to leadership.
• Participate in application-level security incident response and root-cause analysis.

Skills

AppSec leadership

Threat modeling

Security reviews

SAST/DAST/SCA

CI/CD security

Cloud security

Kubernetes

Code review basics

Tools

Checkmarx

Veracode

Snyk

Semgrep

Fortify

Jenkins

GitHub Actions

Job description

Ensemble Health Partners seeks an experienced AVP, Application Security (DevSecOps) to lead and grow the security program across SDLC, tooling, and vulnerability management. You will mentor engineers, perform architecture reviews, and drive secure design practices with product and infrastructure teams.

The role combines hands-on security work with leadership, requires 8+ years in security domains and 3+ years in leadership, and offers remote work within the United States with travel as needed.