Senior VP, Global App Sec & DevSecOps

Koitecc Solutions; Northern, New York (KY, NY); On-site; USD 228,000 - 333,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Parental leave

Paid time off

401(k) with company contribution

Life insurance

Disability insurance

Stock purchase plan

Tuition reimbursement

Job summary

Moody’s is seeking a Senior Leader to define the enterprise application security strategy and posture management across software delivery, aligning with business objectives and the broader cybersecurity program.

You will build and lead a global team of application security, product security, and DevSecOps professionals, embedding secure-by-design practices, driving threat modeling, secure coding, and risk-based vulnerability management while partnering with senior stakeholders across

Qualifications

• 15+ years of progressive cybersecurity experience with leadership in security disciplines.
• Expertise in secure SDLC, threat modeling, and secure design reviews.
• Experience scaling DevSecOps and AI-enabled security capabilities.

Responsibilities

• Lead enterprise application security strategy and posture management across software delivery.
• Build and lead a global team of AS, PS, and DevSecOps professionals.
• Embed security throughout the software development lifecycle with secure-by-design practices.
• Drive threat modeling, secure coding standards, and automated testing.
• Oversee VMDR, CSPM, and SSPM programs and report security metrics.
• Guide CSPM/SSPM capabilities with platform and engineering teams.
• Consolidate security findings into a unified enterprise risk view.
• Collaborate with Engineering, Risk, Legal, Privacy, Compliance and executives.

Skills

Cybersecurity leadership

Secure SDLC

Threat modeling

Security architecture

SAST/DAST/IAST

CI/CD security

Cloud security

Kubernetes

Executive communication

Vulnerability management

Education

Bachelor's degree in Computer Science/Engineering/Info Security

Advanced degree or relevant certifications (CISSP, CSSLP, CISM, GWAPT, OSCP)

Tools

Cloud platforms

Kubernetes

Security tooling & CI/CD

Job description

Moody’s is seeking a Senior Leader to define the enterprise application security strategy and posture management across software delivery, aligning with business objectives and the broader cybersecurity program.

You will build and lead a global team of application security, product security, and DevSecOps professionals, embedding secure-by-design practices, driving threat modeling, secure coding, and risk-based vulnerability management while partnering with senior stakeholders across