Senior Director, Application Security & DevSecOps

Ensemble Health Partners; Kentucky; On-site; USD 180,000 - 240,000; Full time

Job summary

Ensemble Health Partners seeks an AVP, Application Security (DevSecOps) to build, run, and mature the organization's AppSec program while remaining an active technical contributor.

You will own secure SDLC strategy, DevSecOps tooling, vulnerability management, and mentor engineers, performing architecture reviews and threat modeling as needed. You’ll partner with engineering, product, and infrastructure leaders to embed security across the software lifecycle and report risk posture to leadership.

Qualifications

• Experience building and maturing an application security program.
• Hands-on security leadership experience in SDLC, DevSecOps, and vulnerability triage.
• Ability to mentor security engineers and collaborate with cross-functional teams.
• Experience performing security architecture reviews and threat modeling.

Responsibilities

• Build, lead, and mature the AppSec/DevSecOps program across secure SDLC, SAST/DAST/SCA, container and cloud security, and API security.
• Perform hands-on secure code reviews, threat modeling, architecture reviews, and remediation guidance with engineers.
• Mentor and develop AppSec engineers and security champions.
• Design, implement, and tune the AppSec toolchain and integrate security gates into CI/CD pipelines.
• Own the vulnerability management program, triage, prioritize, and drive remediation of critical findings.
• Partner with engineering, product, and architecture to embed security requirements early in design (shift-left).
• Develop and maintain AppSec policies, secure coding standards, and DevSecOps playbooks; train staff accordingly.
• Manage third-party and open-source risk including SBOMs and remediation of vulnerable dependencies.
• Report on AppSec risk posture and program metrics to leadership.

Skills

Valuing Differences

Collaboration

Accountability

Time Management

Developing Trust

Takes Initiative

Job description

Ensemble Health Partners seeks an AVP, Application Security (DevSecOps) to build, run, and mature the organization's AppSec program while remaining an active technical contributor.

You will own secure SDLC strategy, DevSecOps tooling, vulnerability management, and mentor engineers, performing architecture reviews and threat modeling as needed. You’ll partner with engineering, product, and infrastructure leaders to embed security across the software lifecycle and report risk posture to leadership.