Senior AppSec & Infrastructure Protection Leader

Venu-; Orlando (FL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible Time Off

Health & Wellness Coverage

401(k) plan with company match

Job summary

VENU+ is seeking a Senior Application Security and Infrastructure Protection Manager to lead a comprehensive security function across software development, infrastructure, and governance. The role focuses on embedding security, protecting critical systems, and ensuring compliance across mobility, smart lockers, and photo services.

The candidate will coordinate with software development, DevOps, IT, cybersecurity leadership, and vendors to maintain secure, resilient, and compliant platforms while

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field or equivalent experience.
• 7+ years of progressive cybersecurity roles including application security and DevSecOps.
• Strong knowledge of OWASP Top 10 and secure software development lifecycle.

Responsibilities

• Advise on secure software development across SDLC, including threat modelling and secure design reviews.
• Embed DevSecOps controls into delivery pipelines (SAST/DAST/containers).
• Lead security operations, incident response, and vulnerability management activities.
• Develop and enforce cybersecurity policies, governance, and risk-based controls.
• Promote security-first culture among developers, IT teams, and vendors.

Skills

Application security

DevSecOps

Vulnerability management

Incident response

Cloud security

Education

Bachelor's degree in Cybersecurity/related field

Tools

SAST

DAST

SCA

SIEM

EDR

Job description

VENU+ is seeking a Senior Application Security and Infrastructure Protection Manager to lead a comprehensive security function across software development, infrastructure, and governance. The role focuses on embedding security, protecting critical systems, and ensuring compliance across mobility, smart lockers, and photo services.

The candidate will coordinate with software development, DevOps, IT, cybersecurity leadership, and vendors to maintain secure, resilient, and compliant platforms while