Senior VP of Application Security & DevSecOps

PassFort; New York (NY); On-site; USD 228,000 - 333,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Parental leave

Paid time off

401(k) plan with employer contribution

Life insurance

Disability insurance

Accident insurance

Discounted employee stock purchase计划

Tuition reimbursement

Job summary

Moody's is seeking a visionary Enterprise Application Security leader to define and drive the organization-wide security strategy. You will build and scale a global team, embed security into the SDLC, and oversee modern security programs across VMDR, CSPM, and SSPM to protect complex enterprise systems.

You will partner with engineering, risk, legal, and compliance to elevate cyber governance, with a track record of influencing senior leadership and delivering measurable risk reductions.

Qualifications

• 15+ years of cybersecurity leadership and hands-on expertise in application/product security.
• Solid background in secure SDLC, threat modeling, and secure design reviews.
• Ability to review production code and influence engineering leadership.

Responsibilities

• Lead enterprise application security strategy and posture management to enable secure software delivery.
• Define, own, and evolve enterprise Application Security strategy, roadmap, and operating model.
• Build, lead, and develop a global organization of Application Security, Product Security, and DevSecOps professionals.
• Embed security throughout the SDLC with secure-by-design and secure-by-default practices.
• Drive threat modeling, secure coding standards, secure design reviews, automated security testing, and software supply chain security controls.
• Provide strategic oversight for VMDR with risk-based prioritization and remediation governance.
• Guide CSPM and SSPM capabilities with platform and engineering teams.
• Consolidate findings into a unified view of enterprise risk for data-driven decisions.
• Partner with Engineering, Risk, Legal, Privacy, Compliance, and executives to strengthen cyber risk governance.

Skills

15+ years of cybersecurity experience

Application Security

Secure SDLC

Threat modeling

Secure architecture

SAST, DAST, IAST, SCA

CI/CD security

Cloud-native / microservices

Kubernetes

Executive communication

Global team leadership

Education

Bachelor's degree in CS/Engineering/InfoSec

Advanced degree or certifications (CISSP, CSSLP, CISM, GWAPT, OSCP)

Tools

SAST tools

DAST tools

IAST tools

SCA tools

AI-enabled security tools

Job description

Moody's is seeking a visionary Enterprise Application Security leader to define and drive the organization-wide security strategy. You will build and scale a global team, embed security into the SDLC, and oversee modern security programs across VMDR, CSPM, and SSPM to protect complex enterprise systems.

You will partner with engineering, risk, legal, and compliance to elevate cyber governance, with a track record of influencing senior leadership and delivering measurable risk reductions.