Senior AppSec Engineer – Secure SDLC Leader

Pearson; Durham (NC); Hybrid; USD 100,000 - 160,000; Full time

Job summary

Pearson is seeking an experienced Application Security Engineer to own security across the software development lifecycle for our sovereign estate. You will embed security into product and release processes, perform threat modeling, and ensure validated remediation before and after release to reduce real risk.

You will set AppSec direction, mentor engineers, and engage in tooling, budgets, and vendor discussions.

Qualifications

• Bachelor's degree in computer science, Information Security, MIS or an equivalent technical discipline.
• Significant hands-on application security experience at a senior or lead level in an enterprise environment.
• Deep practical experience with SAST, SCA, secrets scanning and container/IaC scanning, including tuning and triage.

Responsibilities

• Own and continuously improve a repeatable Application Security process across SDLC, from design to production.
• Lead threat modeling, secure design reviews, and risk-based release gates.
• Define and govern AppSec tooling, pipelines, SBOMs and artifact signing.
• Provide architect-level guidance on secure coding, design decisions and governance.
• Engage with 3PAOs and external assessors for sovereign/regulatory assurance.

Skills

AppSec engineering

Threat modeling

Secure SDLC

CI/CD security

SAST/SCA/secrets scanning

IaC/Container scanning

RASP/Firewall tuning

Audits & compliance

Communication to leadership

Mentoring engineers

Education

Bachelor’s degree in computer science or information security

Job description

Pearson is seeking an experienced Application Security Engineer to own security across the software development lifecycle for our sovereign estate. You will embed security into product and release processes, perform threat modeling, and ensure validated remediation before and after release to reduce real risk.

You will set AppSec direction, mentor engineers, and engage in tooling, budgets, and vendor discussions.