Application Security Director

Wayne, PA (onsite) role focused on leading and improving Radian’s Application Security program.

Responsibilities

• Define and drive the Application Security strategy, roadmap, operating model, and annual objectives aligned with Information Security and technology priorities.
• Set measurable outcomes and adjust priorities based on risk, business needs, and program performance.
• Provide technical and operational direction for Application Security engineering while contributing directly to priority implementation and engineering work.
• Translate security strategy into executable work; collaborate with engineers and developers on solution design, automation, integrations, and complex technical problems.
• Mentor through active partnership, constructive feedback, and respect for diverse perspectives; build trust and remove delivery barriers.
• Partner with Application Development, Product, DevOps, Cloud, and Architecture leaders to embed security throughout the SDLC.
• Advance secure design, threat modeling, code review, open-source governance, developer enablement, and automated testing within CI/CD workflows.
• Own the effectiveness of Application Security tools, integrations, services, and internally engineered solutions.
• Direct investments and implementation decisions to improve coverage, usability, reliability, and data quality across SAST, DAST, SCA, secrets detection, penetration testing, and related capabilities.
• Establish risk-based processes to assess, prioritize, communicate, and remediate application vulnerabilities and design risks.
• Provide escalation and decision support for material findings, exceptions, false positives, and persistent remediation barriers.
• Maintain standards, processes, service objectives, metrics, and reporting to demonstrate program performance and control effectiveness.
• Partner with Risk, Compliance, Assurance, and Legal to support policy, audit, regulatory, and customer obligations.
• Represent Application Security in enterprise initiatives and lead selected Platform Security efforts across vulnerability management, cloud security, security architecture, data, tooling, vendors, and process transformation.
• Contribute to portfolio strategy, roadmaps, and operating decisions.

Requirements

• 10+ years of progressive experience in application security, product security, software engineering, DevSecOps, or related security disciplines, including leadership of complex programs, technical teams, or enterprise initiatives.
• Proven ability to define strategy and roadmaps, prioritize investment based on risk, and lead delivery through measurable outcomes and continuous improvement.
• Deep knowledge of secure SDLC practices, threat modeling, secure design and code review, vulnerability remediation, penetration testing, and developer security enablement.
• Hands-on experience with Application Security technologies and automation, including SAST, DAST, SCA, secrets detection, CI/CD integrations, Git-based workflows, scripting, APIs, and security data analysis.
• Ability to contribute directly to solution design, implementation, integration, troubleshooting, and lifecycle management while providing technical leadership.
• Knowledge of modern application and cloud architectures: APIs, microservices, containers, serverless technologies, identity and access controls, secrets management, and software supply chain risks.
• Strong leadership, judgment, emotional intelligence, and executive communication skills; ability to influence cross-functional leaders and provide supportive mentorship.
• Bachelor’s Degree or Equivalent Experience.
• Security or technical certifications such as CISSP, CSSLP, AWS Solutions Architect, or comparable credentials are preferred.
• Experience in a regulated environment and familiarity with NIST CSF, NIST SSDF, OWASP SAMM, OWASP ASVS, PCI DSS, SOX, and SOC 2 are preferred.

Technologies

• SAST, DAST, SCA, secrets detection, penetration testing
• CI/CD, Git, scripting, APIs
• Threat modeling, secure design, code review, open-source governance
• Automation, microservices, containers, serverless technologies
• Identity and access controls, secrets management
• Software supply chain risks
• NIST CSF, NIST SSDF, OWASP SAMM, OWASP ASVS, PCI DSS, SOX, SOC 2

Compensation

• $125,000 - $173,000 (USD) base salary per year
• Eligible to participate in an annual incentive program

Benefits

• 25 days of paid time off annually (prorated in the year of hire based on hire date)
• 9 paid holidays + 2 floating holidays (based on hire date)
• Parental leave offered as an opportunity for all new parents
• Multiple medical plan choices, including HSA and FSA options; dental, vision, and basic life insurance
• 401(k) with top of market company match
• Opportunity to participate in Radian’s Employee Stock Purchase Plan (ESPP)
• Homebuyer Perks program

Additional Information

• Estimated application period: 20 days from the job posting date; may be shortened or extended based on business needs and candidate availability
• Radian will consider qualified applicants with arrest or conviction records in accordance with applicable law, including any applicable fair chance law
• Accommodation available: contact [email protected] for questions about the accommodation process

Equal Opportunity Employer Details

• View “Know Your Rights: Workplace Discrimination is Illegal” poster [Link]
• View “Employee Rights under FMLA” [Link]
• View “Employee Rights under EPPA” [Link]