Lead Application Security - DevSecOps & AI-Driven Software Assurance

• Perform security analysis of third-party software, including both source code review and compiled binary analysis where source is not available.
• Conduct binary decomposition and reverse engineering techniques, as appropriate, to evaluate software behavior and identify embedded risks.
• Support the establishment and execution of a software trust and reputation framework, enabling secure decision-making for application onboarding and whitelisting within the enterprise environment.
• Analyze open-source and GitHub-hosted code, including dependencies and contribution risk.
• Partner with AppSec leadership to support application security activities and formalize secure software approval processes.

• Conduct API security assessments and integrate monitoring tools to protect application endpoints.
• Support WAF policy management and application-layer threat monitoring.

• Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software.
• Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications.

• Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software.
• Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications.
• Proven experience in application security, DevSecOps , or software security analysis .
• Strong hands-on expertise in:
• SAST/DAST tools and secure SDLC practices
• SAST/DAST tools and secure SDLC practices
• GitHub and open-source ecosystems
• GitHub and open-source ecosystems

• Experience with third-party software risk analysis, software composition analysis (SCA), or reverse engineering / binary analysis
• Familiarity with software supply chain security and trust validation frameworks
• Experience integrating threat intelligence into security decision-making
• Strong understanding of secure SDLC, threat modeling (e.g., STRIDE), and vulnerability management.
• Experience coordinating penetration tests and working with third-party vendors.
• Strong communication and stakeholder engagement skills.

Applicants must have legal authorization to work in the United States.

We do not offer visa sponsorship at this time.