Senior AppSec Lead - Secure SDLC & Tooling

Objective Partners; Chicago (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

Objective Partners seeks a Senior Application Security Engineer to own the AppSec program and collaborate with engineering teams across Ruby on Rails, React Native, Python, and Go projects. You’ll shape secure development practices, drive tooling and automation, and guide secure feature design.

The role emphasizes secure SDLC, threat modeling, and incident response with hands-on tool experience. Chicago-based, with strong leadership support for security.

Qualifications

• 3–7+ years of experience in Application Security, Product Security, or related engineering roles.
• Strong understanding of secure coding practices, common vulnerabilities (OWASP Top 10), and modern SDLC.
• Experience working with cloud-native applications, ideally in AWS.
• Understanding of SSL certificates & cryptographic key management
• Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools.
• Ability to partner effectively with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Lead and evolve the company’s application security strategy, roadmap, and day-to-day operations.
• Serve as the primary AppSec partner for dev teams working on Ruby on Rails, React Native, Python, and Go projects.
• Provide security guidance during design, development, and code review for new features and projects.
• Drive adoption of secure coding practices and threat-modeling across engineering teams.
• Manage and optimize AppSec tooling (SAST, DAST, WAFs) and integrate security into CI/CD pipelines.
• Build and maintain secure development standards, playbooks, and training materials.
• Partner with engineering during sprint planning to address risks proactively.
• Lead or support investigation and remediation of application-level vulnerabilities.

Skills

Secure coding

OWASP Top10

AWS cloud

Key management

SAST/DAST/WAF

CI/CD security

DevSecOps

PCI experience

Tools

GitHub Advanced Security

Invicti

Hadrian

AppDome

Cloudflare WAF

Job description

Objective Partners seeks a Senior Application Security Engineer to own the AppSec program and collaborate with engineering teams across Ruby on Rails, React Native, Python, and Go projects. You’ll shape secure development practices, drive tooling and automation, and guide secure feature design.

The role emphasizes secure SDLC, threat modeling, and incident response with hands-on tool experience. Chicago-based, with strong leadership support for security.