Remote Senior AppSec & DevSecOps Leader

Ensemble Health Partners; United States; Remote; USD 172,000 - 258,000; Full time

Benefits offered by this job

Healthcare benefits

Tuition reimbursement

Career growth opportunities

Recognition programs

Job summary

Ensemble Health Partners seeks an AVP, Application Security (DevSecOps) to lead and actively contribute to maturing the organization’s AppSec program. You will own secure SDLC strategy, DevSecOps tooling, vulnerability management, and threat modeling while mentoring engineers and conducting security architecture reviews.

This is a remote role in the United States with travel to client sites or corporate offices as needed.

Qualifications

• 8+ years of experience in application security, secure software development, or DevSecOps.
• 3+ years in a leadership or technical lead capacity.
• Relevant certifications preferred (e.g., CSSLP, CISSP, GWAPT, OSCP).
• Hands-on experience with SAST, DAST, and SCA tools (Checkmarx, Veracode, Snyk, Semgrep, Fortify).
• Experience integrating security into CI/CD pipelines and cloud security practices.
• Strong communication and leadership skills.

Responsibilities

• Build, lead, and continuously mature a comprehensive AppSec and DevSecOps program across secure SDLC, SAST/DAST/SCA, container and cloud-native security, and API security.
• Serve as a hands-on team member: perform secure code reviews, threat modeling, security architecture reviews, and remediation guidance.
• Mentor and develop application security engineers and security champions.
• Design, implement, and tune the AppSec toolchain and integrate security gates into CI/CD pipelines.
• Own the application vulnerability management program, including triage, prioritization, remediation SLAs, and escalation of high-severity issues.
• Partner with engineering/product/architecture to embed security requirements and shift-left practices.
• Develop and maintain security policies, secure coding standards, and DevSecOps playbooks.
• Manage third-party and open-source risk, including SBOM and remediation of vulnerable dependencies.
• Report on risk posture and remediation trends to executive leadership.
• Participate in incident response and root cause analysis for application security events.

Skills

Leadership

Threat modeling

CI/CD pipelines

Cloud security

Programming languages

Tools

Checkmarx

Veracode

Snyk

Semgrep

Fortify

Job description

Ensemble Health Partners seeks an AVP, Application Security (DevSecOps) to lead and actively contribute to maturing the organization’s AppSec program. You will own secure SDLC strategy, DevSecOps tooling, vulnerability management, and threat modeling while mentoring engineers and conducting security architecture reviews.

This is a remote role in the United States with travel to client sites or corporate offices as needed.