Senior Application Security Compliance Lead

JCW Group; Charlotte (NC); Hybrid; USD 180,000 - 230,000; Full time

Job summary

JCW Group in Charlotte, NC is seeking a Senior Application Security Compliance Lead — Vice President to bridge security and engineering. Hybrid, full-time, VP-level, hands-on role overseeing SAST/DAST/IAST, container security, and remediation across multiple development teams.

You will translate technical risk into actionable remediation, own security posture reporting to leadership, and drive the maturity of the program with cross-functional impact.

Qualifications

• 5+ years in application security, penetration testing, or related cybersecurity discipline.
• 5+ years with SAST/DAST or similar tooling.
• Strong grounding in SSDLC, OWASP Top 10, CWE.
• Experience managing vulnerability remediation programs.
• Proficiency in C#, C++, Java, Python, or .NET.
• CI/CD security integration and container security experience.

Responsibilities

• Drive remediation of vulnerabilities found via SAST, SCA, DAST, IAST, and container scanning.
• Review code across multiple languages; explain risk and remediation to technical and non-technical audiences.
• Validate findings and track SLA compliance with vulnerability management teams.
• Report on application security posture and remediation progress to leadership.
• Manually validate findings, including penetration test results.
• Drive process, automation, and maturity improvements across the program.

Skills

App security

SAST/DAST tooling

SSDLC / OWASP / CWE

Vulnerability remediation

Programming languages (C#, C++, Java,

CI/CD security & container security

Tools

SAST tooling

DAST tooling

Container security tooling

Job description

Senior Application Security Compliance Lead — Vice President

Charlotte, NC (Hybrid) | Full Time

Our client, a top-tier global financial institution, is scaling its application security program and needs a VP-level lead who can sit between security and engineering — reading code, interpreting scan output, and turning findings into remediation that actually happens.

You’ll own the SAST/DAST/SCA/IAST and container security programs end to end, work directly with development teams on fixes, and be the voice that translates technical risk into a story leadership acts on. It’s a hands‑on, high‑visibility seat with real influence over how a global bank builds secure software.

Responsibilities

• Drive remediation of vulnerabilities found via SAST, SCA, DAST, IAST, and container scanning
• Review code across multiple languages; explain risk and remediation to technical and non-technical audiences
• Validate findings and track SLA compliance with vulnerability management teams
• Report on application security posture and remediation progress to leadership
• Manually validate findings, including penetration test results
• Drive process, automation, and maturity improvements across the program

Requirements

• 5+ years in application security, penetration testing, or related cybersecurity discipline
• 5+ years with SAST/DAST or similar tooling
• Strong grounding in SSDLC, OWASP Top 10, CWE
• Experience managing vulnerability remediation programs
• Proficiency in C#, C++, Java, Python, or .NET
• CI/CD security integration and container security experience