Application Security Engineering Technical Director

Strategic Leadership Develop and implement a comprehensive application security strategy aligned with business objectives, focusing on automation and proactive security measures. Lead, mentor, and grow a small team of application security engineers, fostering a culture of innovation, collaboration, and continuous improvement. Champion the "shift left" security philosophy, embedding security considerations early in the SDLC. Security Automation and Integration Drive the implementation and optimization of automated security testing tools and processes, including SAST, DAST, SCA, and IAST. Integrate security testing seamlessly into CI/CD pipelines, enabling continuous security monitoring and remediation. Technical Leadership Lead the evaluation, selection, implementation, and optimization of new application security technology solutions. Evaluate and manage relationships with security tool vendors, ensuring optimal performance and cost-effectiveness. Mentor and guide junior application security engineers, providing technical expertise and fostering professional development. Collaborate with cross-functional teams to continuously improve application security processes, tools, and workflows. Continuous Improvement and Automation Identify opportunities to enhance the identification, assessment, and remediation of software issues and vulnerabilities. Develop and implement scripts and workflows to streamline operations and reduce manual effort. Stay current with emerging security threats, software development practices and platforms, software vulnerabilities, and industry best practices. Communication and Collaboration Closely partner with development teams to drive secure coding practices and application security principles. Effectively communicate complex technical issues to both technical teams and non-technical stakeholders. Prepare and deliver reports, dashboards, and presentations to leadership and other departments. Build strong relationships with IT, DevOps, and business units to ensure alignment on security objectives.