VP, Application Security Assurance Lead

SMBC Group; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group in Charlotte, NC seeks an experienced Application Security professional to lead security assurance across the Americas. You will partner with software engineers to identify, prioritize, and remediate vulnerabilities throughout the SDLC and advise on secure coding practices.

Ideal candidates have 7+ years in application security, SAST/DAST expertise, SSDLC knowledge, and track record driving remediation with cross-functional teams. Hybrid work is available.

Qualifications

• 7+ years of experience in application security or a related cybersecurity discipline.
• Experience leading vulnerability remediation with software engineering teams.
• Ability to read, analyze, and explain source code vulnerabilities and secure coding approaches.
• Experience developing or maintaining secure software delivery processes within CI/CD environments.
• Strong understanding of the Secure Software Development Lifecycle (SSDLC).
• Knowledge of common application security threats, attack techniques, and mitigation strategies.
• Experience creating process documentation, security standards, and operational procedures.
• Experience using Jira and Confluence.

Responsibilities

• Partner with software engineering teams to identify, prioritize, and remediate application security vulnerabilities before production release.
• Review and explain security findings from code scans, helping development teams understand root causes and remediation options.
• Ensure applications are consistently assessed through security testing activities, including SAST, SCA, DAST, IAST, and container security scanning.
• Collaborate with security architecture teams on secure design reviews, threat modeling activities, and application security improvements.
• Work with vulnerability management teams to validate findings and ensure remediation activities meet established service level agreements.
• Develop and maintain reporting that measures application security risk, remediation progress, and program effectiveness for leadership.
• Perform targeted manual validation of security findings and support application security testing efforts when needed.
• Contribute to the continuous improvement of secure development processes, security champion programs, and developer education initiatives.

Skills

Application security

Vulnerability remediation

Secure SDLC

CI/CD security

SAST/DAST

OWASP Top 10

Threat modeling

Jira

Confluence

Code review

Tools

Jira

Confluence

Job description

SMBC Group in Charlotte, NC seeks an experienced Application Security professional to lead security assurance across the Americas. You will partner with software engineers to identify, prioritize, and remediate vulnerabilities throughout the SDLC and advise on secure coding practices.

Ideal candidates have 7+ years in application security, SAST/DAST expertise, SSDLC knowledge, and track record driving remediation with cross-functional teams. Hybrid work is available.