Associate Director - Application Security

Lead enterprise application security programs that span secure SDLC controls, security design reviews, and AI-enabled testing.

Responsibilities

• Lead complex application security assessments across multiple methodologies, including SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate vulnerabilities.
• Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms using risk-based quality gates to reinforce secure coding practices.
• Conduct threat modeling and perform security design reviews for new applications, APIs, and cloud services; provide guidance on secure architecture decisions.
• Design and implement AI-enabled Application Security capabilities, including custom tools, agents, and automations to improve security testing, triage, and remediation while meeting enterprise governance standards.
• Collaborate with engineering, product, cloud, and risk stakeholders to address systemic application risks and establish scalable security controls across the SDLC.
• Provide technical leadership and mentorship to security analysts and engineering partners; contribute to enterprise standards, procedures, and audit-ready documentation.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or Engineering.
• 6+ years of experience in Application Security, DevSecOps, or secure software.
• Proficiency with application security testing and design practices, including SAST, SCA, DAST, threat modeling, and CI/CD security integration.
• Experience integrating security controls into GitHub, Azure DevOps, Jenkins, or cloud-native delivery environments.
• Experience using generative AI and AI-assisted development tools to build custom security tooling, scripts, integrations, or automations.

Additional Preferred Qualifications

• Experience with Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, and retrieval-augmented generation for secure enterprise AI integration.
• Experience with cloud application security across AWS, Azure, and GCP, including understanding of multi-cloud security controls.
• Proficiency in Python, PowerShell, or equivalent scripting languages to automate and improve security operations at enterprise scale.
• Experience with software supply chain security initiatives, including dependency governance, artifact management, provenance validation, and trusted package consumption.
• Ability to communicate complex security risk to senior stakeholders and drive remediation across distributed engineering teams.
• Experience providing technical mentorship within security or engineering teams.

Technologies

• SAST, SCA, DAST, API security, secrets detection, threat modeling
• GitHub, Azure DevOps, Jenkins, CI/CD, SDLC
• Python, PowerShell
• AWS, Azure, GCP
• Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, generative AI

Benefits

• Annual incentive plan
• Health care coverage designed for the mind and body
• Generous time off
• Access a wealth of resources to grow your career and learn valuable new skills
• Competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
• Family friendly perks for partners and little ones
• Retail discounts
• Referral incentive awards

Compensation

• Anticipated base salary range: $130,000 to $190,000
• Final base salary based on geographic location, experience level, skill set, training, and licenses and certifications

Mission and Values

Mission: Advancing Essential Intelligence.

• Values: Integrity
• Values: Discovery
• Values: Partnership

Location: New York, NY (onsite)