VP, Application Security & Remediation Leader

JCW Group; Charlotte (NC); Hybrid; USD 180,000 - 230,000; Full time

Job summary

JCW Group in Charlotte, NC is seeking a Senior Application Security Compliance Lead — Vice President to bridge security and engineering. Hybrid, full-time, VP-level, hands-on role overseeing SAST/DAST/IAST, container security, and remediation across multiple development teams.

You will translate technical risk into actionable remediation, own security posture reporting to leadership, and drive the maturity of the program with cross-functional impact.

Qualifications

• 5+ years in application security, penetration testing, or related cybersecurity discipline.
• 5+ years with SAST/DAST or similar tooling.
• Strong grounding in SSDLC, OWASP Top 10, CWE.
• Experience managing vulnerability remediation programs.
• Proficiency in C#, C++, Java, Python, or .NET.
• CI/CD security integration and container security experience.

Responsibilities

• Drive remediation of vulnerabilities found via SAST, SCA, DAST, IAST, and container scanning.
• Review code across multiple languages; explain risk and remediation to technical and non-technical audiences.
• Validate findings and track SLA compliance with vulnerability management teams.
• Report on application security posture and remediation progress to leadership.
• Manually validate findings, including penetration test results.
• Drive process, automation, and maturity improvements across the program.

Skills

App security

SAST/DAST tooling

SSDLC / OWASP / CWE

Vulnerability remediation

Programming languages (C#, C++, Java,

CI/CD security & container security

Tools

SAST tooling

DAST tooling

Container security tooling

Job description

JCW Group in Charlotte, NC is seeking a Senior Application Security Compliance Lead — Vice President to bridge security and engineering. Hybrid, full-time, VP-level, hands-on role overseeing SAST/DAST/IAST, container security, and remediation across multiple development teams.

You will translate technical risk into actionable remediation, own security posture reporting to leadership, and drive the maturity of the program with cross-functional impact.