Senior Application Risk Lead — SDLC, DevSecOps & AI

MSCCN; Irving (TX); On-site; USD 120,000 - 190,000; Full time

Job summary

MSCCN in Irving, Texas seeks an Application Risk Domain Officer to provide second-line oversight across application domains within Technology Risk Management. You will define risk assessment, monitoring, and reporting approaches, evaluating risk conditions and controls to inform enterprise risk.

The role requires deep technical knowledge of modern engineering practices, including SDLC, CI/CD, IaC, cloud-native architectures, software supply chain security, and AI-enabled workflows.

Qualifications

• 7+ years of Technology Risk experience.
• Experience across software engineering, DevSecOps, platform or cloud engineering, or technology risk preferred.

Responsibilities

• Provide expert second-line oversight of modern engineering practices, including application architecture patterns, secure SDLC, CI/CD, DevSecOps, platform engineering, infrastructure as code, containerized workloads, and production release controls.
• Own second-line technology risk coverage and provide thought leadership across the application risk domain, partnering with engineering, controls and technology teams to drive consistent oversight.
• Perform rigorous assessments of source control workflows, branching strategies, build systems, test automation, artifact repositories, package dependencies, deployment orchestration, and runtime platform configurations.

Skills

Technology Risk

DevSecOps

Software Engineering

Cloud Engineering

Application Security

CI/CD

IaC

Kubernetes

Observability

Tools

GitHub/GitLab

Jenkins/Azure DevOps

Terraform

Containers

Kubernetes

Cloud Platforms

Observability

Security Testing

Job description

MSCCN in Irving, Texas seeks an Application Risk Domain Officer to provide second-line oversight across application domains within Technology Risk Management. You will define risk assessment, monitoring, and reporting approaches, evaluating risk conditions and controls to inform enterprise risk.

The role requires deep technical knowledge of modern engineering practices, including SDLC, CI/CD, IaC, cloud-native architectures, software supply chain security, and AI-enabled workflows.