Lead AppSec Engineer

Lead AppSec Engineer to support Gartner’s Application Security (AppSec) function with vulnerability assessment operations, risk remediation tracking, and security tool orchestration and automation.

Responsibilities

• Partner with business stakeholders to design secure applications, assess applications for security weaknesses, and drive remediation for identified issues
• Mentor engineers and security champions on practical threat modeling techniques
• Triage and prioritize security risks, vulnerabilities, and exceptions based on business impact and risk tolerance
• Coordinate orchestration, automation, and management of security technologies and platforms
• Own day-to-day life cycle management activities, including identification, threat assessment, threat modeling, and risk avoidance
• Produce reasonable, actionable reports that show direct impact to the security posture
• Define and implement meaningful metrics to measure control effectiveness using KRIs and security scorecards
• Serve as a subject-matter-expert for Application Security and act as first point of contact for critical AppSec issues, security risk assessments, and triaging CI/CD security concerns with partners and stakeholders
• Evaluate business and technical requirements to identify and implement tools, processes, and technologies that improve security posture across environments
• Use data to guide prioritization, surface systemic issues, and influence roadmap decisions

Requirements

• 6-8 years of experience in a Security Engineering role with proven experience in DevSecOps, Cloud Security, and Application Security
• Strong independent critical thinking and problem-solving skills, including the ability to evaluate and pivot based on organizational priorities
• Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling
• Formal experience with threat modeling
• Experience leading projects, initiatives, and resources through direct and indirect leadership
• Deep knowledge of risk assessment and prioritization, with the ability to think from a threat actor perspective to inform threat models
• Cloud experience with AWS, Azure, or GCP
• Understanding of Infrastructure as Code (IaC) and Policy as Code (PaC) concepts
• Familiarity with technical security controls, guidelines, and frameworks including SOC2, ISO 27001/27013, and NIST 800-53
• Ability to automate tasks and develop code solutions for repetitive problems
• Scripting or programming experience with one or more of: Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash
• Experience with penetration testing and web application assessment
• Demonstrated communication, collaboration, and critical thinking skills
• Ability to build trusting, meaningful relationships with peers, stakeholders, partners, and suppliers
• Capability to define and communicate risk in business-relevant language for both non-technical and technical audiences
• Ability to apply expert knowledge to solve complex business and technical issues strategically
• Desire for life-long learning and continuous personal and professional development

Technologies

• DevSecOps, Cloud Security, Application Security
• Vulnerability scanning technologies, AST platforms
• AWS, Azure, GCP
• Infrastructure as Code (IaC), Policy as Code (PaC)
• SOC2, ISO 27001/27013, NIST 800-53
• Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash

Benefits

• Competitive compensation
• Limitless growth and learning opportunities
• Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more
• Collaborative, positive culture with a diverse team
• Opportunity to make an impact by contributing directly to company strategy
• Flexibility to work from home plus energy of collaborating in dynamic offices
• 20+ PTO days plus holidays and floating holidays in your first year
• Extensive medical, dental insurance, and vision plan
• 401K with corporate match and immediate vesting
• Health-and-wellness-related allowance programs
• Parental leave
• Tuition reimbursement
• Employee Stock Purchase Plan
• Employee Assistance Program
• Gartner Gives Charity Match

Location: Irving, TX (hybrid) | Salary: USD 116,000 - 170,000 per year | Experience: 6+ years