VP, Application Security Assurance - Hybrid/Remote

SMBC Group; Charlotte (NC); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking an Applications Security Assurance Lead, Vice President to helm the Americas' security program for software applications. You will lead security assurance activities, drive vulnerability remediation, and collaborate with engineering teams to embed secure coding practices across the SDLC.

The role emphasizes strategic risk management, executive reporting, and building security champion initiatives while guiding incident response and security testing initiatives.

Qualifications

• 7+ years of experience in application security or related cybersecurity discipline.
• Experience leading vulnerability remediation with software engineering teams.
• Strong understanding of OWASP Top 10 and secure coding practices.

Responsibilities

• Partner with software engineering teams to identify, prioritize, and remediate application security vulnerabilities before production release.
• Review and explain security findings from code scans to development teams.
• Ensure applications are assessed through security testing activities (SAST/DAST/IAST) and container security scanning.
• Collaborate with security architecture on secure design reviews and threat modeling.
• Develop and maintain reporting on application security risk and program effectiveness.

Skills

Application security

Vulnerability remediation

Secure coding

SSDLC

CI/CD security

Code review

Education

Bachelor's degree in CS/InfoSec

Tools

Jira

Confluence

Job description

SMBC Group is seeking an Applications Security Assurance Lead, Vice President to helm the Americas' security program for software applications. You will lead security assurance activities, drive vulnerability remediation, and collaborate with engineering teams to embed secure coding practices across the SDLC.

The role emphasizes strategic risk management, executive reporting, and building security champion initiatives while guiding incident response and security testing initiatives.