Senior Application Security Enablement Lead

Compunnel, Inc.; Dallas (TX); Vor Ort; USD 100.000 - 130.000; Vollzeit

Zusammenfassung

Compunnel, Inc. is seeking a Sr. Application Security Engineer to enhance the Application Security Champions (ASC) Program. This role is crucial for embedding application security within the software development lifecycle through secure coding practices and governance.

The ideal candidate will have over 5 years in application security, strong leadership skills, and the ability to foster a security-first development culture across multiple teams.

Qualifikationen

• 5+ years of experience in Application Security.
• Experience leading security enablement programs or Application Security Champion programs.
• Strong understanding of secure software development lifecycle (SSDLC) practices.
• Proven experience coaching developers on secure coding practices.

Aufgaben

• Scale the Application Security Champions Community of Practice across teams.
• Develop and maintain ASC playbooks and training materials.
• Enable development teams with guidance on secure coding practices.
• Implement CI/CD-integrated security controls and workflows.
• Coordinate application migration planning and track risks.
• Promote application security awareness and culture.

Kenntnisse

Application Security expertise

Secure coding practices

Threat modeling

Governance

CI/CD-integrated security controls

Ausbildung

Bachelor's degree or equivalent experience

Tools

Learning Management Systems (LMS)

SAST tools

DAST tools

Software Composition Analysis (SCA) tools

ServiceNow Application Vulnerability Response (AVR)

Jobbeschreibung

Compunnel, Inc. is seeking a Sr. Application Security Engineer to enhance the Application Security Champions (ASC) Program. This role is crucial for embedding application security within the software development lifecycle through secure coding practices and governance.

The ideal candidate will have over 5 years in application security, strong leadership skills, and the ability to foster a security-first development culture across multiple teams.