VP, Application Security: Lead Vulnerability Remediation

SMBC; Charlotte (NC); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Disability accommodations

Job summary

SMBC is seeking an Application Security Assurance Lead, Vice President, to strengthen the security of applications across the Americas. You will lead assurance activities, drive remediation efforts, and partner with software engineering teams to address security risks throughout the software development lifecycle.

You will serve as a trusted advisor on secure coding, review findings, and help mature the organization’s application security program. This is a hybrid role based in Charlotte, NC.

Qualifications

• 7+ years of experience in application security or related cybersecurity discipline.
• Experience leading vulnerability remediation efforts with software teams.
• Ability to read, analyze, and explain code vulnerabilities and secure coding approaches.
• Experience in CI/CD secure software delivery processes.
• Strong understanding of SSDLC and OWASP Top 10.
• Experience with Jira and Confluence.
• Experience with one or more programming languages (C#, Java, Python, .NET).

Responsibilities

• Lead application security assurance activities across the Americas.
• Prioritize and remediate vulnerabilities before production.
• Explain security findings from code scans to development teams.
• Ensure security testing coverage (SAST, DAST, IAST, SCA, container security).
• Collaborate with security architecture on secure design reviews and threat modeling.
• Develop and maintain security metrics and leadership reporting.

Skills

Application security

Vulnerability remediation

CI/CD security

Code review

Threat modeling

Jira/Confluence

Secure SDLC

Tools

Jira

Confluence

CI/CD tooling

Job description

SMBC is seeking an Application Security Assurance Lead, Vice President, to strengthen the security of applications across the Americas. You will lead assurance activities, drive remediation efforts, and partner with software engineering teams to address security risks throughout the software development lifecycle.

You will serve as a trusted advisor on secure coding, review findings, and help mature the organization’s application security program. This is a hybrid role based in Charlotte, NC.