Senior AppSec Leader - AI Security & Penetration Expert

Apex Systems; Charlotte, Northern (NC, KY); Hybrid; USD 134,000 - 145,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Match

Professional development

Job summary

Everforth Apex is seeking an experienced Engineer 5 / Senior Lead Application Security Engineer to define and execute enterprise AppSec strategy, supporting modernization efforts including DCMS. You will lead security initiatives, drive automation, and oversee offensive testing across large portfolios.

You will partner with executives, engineering teams, and business stakeholders to reduce risk, implement SSDLC controls, and advance AI security capabilities using emerging technologies.

Qualifications

• 7+ years in Application Security or related engineering fields.
• Deep expertise in enterprise-scale AppSec programs and SSDLC controls.
• Experience leading security strategy, risk reduction, and modernization initiatives.
• Proven ability to influence executives and cross-functional teams.

Responsibilities

• Define and lead enterprise AppSec strategy across DCMS initiatives.
• Drive security control adoption with engineering, architects, and business stakeholders.
• Lead penetration testing programs, threat modeling, and offensive security activities.
• Advance AI/GenAI security use cases and secure-by-design practices.
• Implement security automation and integrate tooling into CI/CD pipelines.

Skills

Threat Modeling

Secure Design

Secure Coding Practices

SAST

SCA

DAST

Penetration Testing

Executive Stakeholder Management

Tools

Security Automation Tools

Job description

Everforth Apex is seeking an experienced Engineer 5 / Senior Lead Application Security Engineer to define and execute enterprise AppSec strategy, supporting modernization efforts including DCMS. You will lead security initiatives, drive automation, and oversee offensive testing across large portfolios.

You will partner with executives, engineering teams, and business stakeholders to reduce risk, implement SSDLC controls, and advance AI security capabilities using emerging technologies.