Senior AppSec Engineer: Cloud, IaC & Automation

Gartner; Fort Myers (FL); Hybrid; USD 116,000 - 170,000; Full time

Benefits offered by this job

Hybrid work environment

PTO and holidays

Health insurance

401k match

Employee Stock Purchase Plan

Tuition reimbursement

Parental leave

Job summary

Gartner IT is seeking a Lead Security Engineer to support Gartner's AppSec function. You will execute daily vulnerability assessments, work with Security partners, and remediate risks while balancing security, business, and user experience.

You will mentor engineers in threat modeling, triage risks, and drive automation of security tools across CI/CD. This hybrid role offers growth, training, and a collaborative culture within Gartner IT.

Qualifications

• Experience with vulnerability scanning technologies, AST platforms, and cloud security tooling.
• Formal experience with threat modeling.
• Experience leading projects, initiatives, and resources.
• Deep knowledge of risk assessment and threat modeling from attacker perspective.
• Cloud experience (AWS, Azure, GCP).
• Infrastructure as Code (IaC) and Policy as Code (PaC).
• Nice-to-have: scripting or programming (e.g., Python, PowerShell).
• Experience with penetration testing and web application assessment.

Responsibilities

• Collaborate with stakeholders to design secure applications and remediate issues.
• Mentor engineers on threat modeling techniques.
• Triage and prioritize security risks and vulnerabilities.
• Coordinate orchestration and management of security technologies.
• Own day-to-day lifecycle management and risk assessment.
• Create actionable reports on security posture impact.
• Define metrics to measure security control effectiveness.
• Serve as SME for Application Security and CI/CD triage.

Skills

Vulnerability scanning

Threat modeling

DevSecOps

Cloud security

Automation

CI/CD security

Security tooling integration

Job description

Gartner IT is seeking a Lead Security Engineer to support Gartner's AppSec function. You will execute daily vulnerability assessments, work with Security partners, and remediate risks while balancing security, business, and user experience.

You will mentor engineers in threat modeling, triage risks, and drive automation of security tools across CI/CD. This hybrid role offers growth, training, and a collaborative culture within Gartner IT.