Senior AppSec Engineer - Threat Modeling & Automation

Jobs in JS; Stamford (CT); Hybrid; USD 116,000 - 170,000; Full time

Benefits offered by this job

401K with corporate match

Health insurance

PTO and holidays

Tuition reimbursement

Employee stock purchase plan

Parental leave

Job summary

Gartner IT is seeking a Lead Security Engineer to support AppSec, DevSecOps, and cloud security across our hybrid environment. You will design secure applications, mentor teams on threat modeling, and drive risk-based remediation with stakeholders.

The role emphasizes automation, security tooling, and data-driven security metrics. You will collaborate with diverse teams and act as a security SME, guiding CI/CD security, risk assessments, and tool implementations to strengthen our security

Qualifications

• 6–8 years of experience in a Security Engineering role focusing on DevSecOps, Cloud Security and AppSec.
• Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling.
• Formal experience with threat modeling.
• Experience leading projects and teams.
• Cloud experience (AWS, Azure, GCP).
• Infrastructure as Code (IaC) and Policy as Code (PaC) concepts.

Responsibilities

• Collaborate with business stakeholders to design secure applications, test applications for security weakness, and partner on remediation of identified issues.
• Mentor engineers and security champions on practical threat modeling techniques.
• Triage and prioritize security risks, vulnerabilities, and exceptions in alignment with business impact and risk tolerance.
• Coordinate the orchestration, automation, and management of security technologies and platforms.
• Own day‑to‑day life cycle management, including identification, threat assessment, threat modelling and risk avoidance.
• Create reasonable and actionable reports showing direct impact to the security posture.
• Define and implement meaningful metrics to measure the effectiveness of security controls through KRIs and security scorecards.
• Serve as a subject‑matter expert for Application Security; act as a first point of contact for critical issues, risk assessments and CI/CD triage.
• Evaluate business and technical requirements to identify and implement tools, processes, and technologies to improve security posture.
• Use data to drive prioritization and influence roadmap decisions.

Skills

Threat modeling

DevSecOps

Cloud security

Application security

Leadership

Tools

Vulnerability scanners

AST platforms

Cloud security tooling

IaC/PaC concepts

Job description

Gartner IT is seeking a Lead Security Engineer to support AppSec, DevSecOps, and cloud security across our hybrid environment. You will design secure applications, mentor teams on threat modeling, and drive risk-based remediation with stakeholders.

The role emphasizes automation, security tooling, and data-driven security metrics. You will collaborate with diverse teams and act as a security SME, guiding CI/CD security, risk assessments, and tool implementations to strengthen our security