Senior Application Security Lead - North America

Yoh; Pennsylvania; On-site; USD 126,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401K Retirement Savings Plan

Direct Deposit & weekly epayroll

Job summary

Yoh Services LLC, a North America staffing leader, seeks a Sr. Technical Security Lead to guide application security from design to production, bringing deep expertise and secure coding practices to ensure secure development processes.

You will oversee security reviews, influence secure design, and evaluate AI-related risks across the SDLC. You will collaborate with development teams, CIOs, and business units, applying risk-based approaches across IAM, network security, data protection, and

Qualifications

• 8–10 years of experience in information security roles spanning Application Security, Vulnerability Management, Identity and Access Management, Network Security, Data Security, and related disciplines.
• Bachelor’s degree required in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Hands-on security architecture expertise to review complex architectures, changes, and risk scenarios and make sound recommendations.
• Experience across network security, firewalls, DNS, Windows and Linux administration, cloud security, Active Directory, vulnerability management, secure ports and protocols, encryption, 3-tier architecture, database security, zero trust, third-party reviews, and data loss prevention.
• Ability to interpret and apply information security standards and frameworks such as ISO/IEC 27001/27002, PCI-DSS, and the NIST Cybersecurity Framework.
• Excellent communication with technical and non-technical stakeholders, including business leaders, project teams, and technical partners.
• Experience managing project lifecycles across Agile, Waterfall, and CI/CD environments and the ability to elevate risks.

Responsibilities

• Lead application security reviews and SDLC engagement with a consultative, business enabling approach.
• Apply deep knowledge of secure coding and application security best practices to influence secure design.
• Evaluate AI related risks and opportunities as part of application security analysis and review.
• Use broader cybersecurity knowledge across penetration testing, vulnerability scanning, network security, identity and access management, and related areas.
• Partner with technology teams and line of business CIOs to support secure change control and delivery.
• Identify security risks and recommend practical remediation options that balance protection and business needs.
• Build trusted relationships with application development teams, business leaders, and executives.
• Help ensure security is embedded in decisions affecting design, delivery, and production readiness.

Job description

*** THIS IS A DIRECT HIRE ROLE - NO 3RD PARTY/SUB-VENDOR CANDIDATES PLEASE ***

Sr. Technical Security Lead, North America

*** THIS IS A DIRECT HIRE ROLE - NO 3RD PARTY/SUB-VENDOR CANDIDATES PLEASE ***

Job Description

As a Senior Technical Security Lead on our North America Application Security team, you will help shape secure technology solutions from the earliest stages of design through production delivery. You will bring deep application security expertise, secure coding knowledge, and a business enabling mindset to help teams build security in from the start rather than address it after the fact. In this role, you will serve as a trusted advisor across the North America technology footprint, applying broader cybersecurity knowledge across penetration testing, vulnerability scanning, network security, identity and access management, and related domains to identify risk, strengthen controls, and influence sound design decisions. You will also help advance awareness of how AI is emerging in software development and security engineering, and apply that perspective to application security analysis, review, and SDLC decision making. Working closely with application development teams, technology leaders, and line of business CIOs, you will help ensure security is part of the conversation early and often throughout the solutioning and development lifecycle. This partnership will support secure change control, enable stable delivery, and help protect and strengthen the security of application ecosystem as it evolves alongside the business.

In this role, you will

• Lead application security reviews and SDLC engagement with a consultative, business enabling approach
• Apply deep knowledge of secure coding and application security best practices to influence secure design
• Evaluate AI related risks and opportunities as part of application security analysis and review
• Use broader cybersecurity knowledge across penetration testing, vulnerability scanning, network security, identity and access management, and related areas
• Partner with technology teams and line of business CIOs to support secure change control and delivery
• Identify security risks and recommend practical remediation options that balance protection and business needs
• Build trusted relationships with application development teams, business leaders, and executives
• Help ensure security is embedded in decisions affecting design, delivery, and production readiness

Qualifications

• A minimum of 8–10 years of experience in information security roles spanning Application Security, Vulnerability Management, Identity and Access Management, Network Security, Data Security, and/or related disciplines
• Bachelor’s degree required in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience
• Apply deep security architecture expertise to review complex architectures, changes, and risk scenarios and make sound recommendations
• Demonstrate hands-on technical experience across network security, firewalls, DNS, Windows and Linux administration, cloud security, Active Directory, vulnerability management, secure ports and protocols, encryption, 3-tier architecture, database security, zero trust, third-party reviews, and data loss prevention
• Interpret and apply information security standards and frameworks such as ISO/IEC 27001/27002, PCI-DSS, and the NIST Cybersecurity Framework
• Communicate clearly with technical and non-technical stakeholders, including business leaders, project teams, and technical partners
• Manage project lifecycles across Agile, Waterfall, and CI/CD environments while staying self-directed, accountable, and able to escalate risks appropriately
• Collaborate effectively across priorities and leverage AI to improve security governance, automation, and review efficiency

Estimated Min Rate: $126000.00
Estimated Max Rate: $180000.00


What’s In It for You?
We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent community that will provide you with access to Yoh’s vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh’s hiring clients’ preferences. To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice:https://www.yoh.com/privacy-notice

Stay Safe During Your Job Search
Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.