Job Description

Overseeing the implementation, monitoring, evaluation, and maintenance of application and IT security systems, policies, and procedures to safeguard the confidentiality, integrity, and availability of the organization's information, systems, and processes
Embedding security into the software development lifecycle, defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation
Determining and establishing methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review
Leading the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security
Partnering with development and platform teams to triage, prioritize, and drive remediation of application