Static Application Security Testing

Static Application Security Testing Cybersecurity Jobs

2 jobs found

Today

Director, Application Security (Cybersecurity Defense)

Information Technology Senior Management Forum Cardinal, VA 🇺🇸 Remote

Cardinal, VA

Today

$135k - $208k/yr Full time Api Security Application Security Cloud Platforms

Apply Now

Job Description

Lead the enterprise application security strategy across Pharma, Medical, and Commercial Technology segments, embedding security into the SDLC and reducing application risk.

Responsibilities

Direct the enterprise application security program to align with cybersecurity priorities, risk governance, and business goals.
Create governance structures to weave security into the software development lifecycle across all app domains.
Partner with enterprise architecture, engineering, and product teams to synchronize security with technology roadmaps and transformation efforts.
Provide executive and business leadership with guidance on application security risks, priorities, and funding decisions.
Foster a secure-by-design mindset across development and engineering groups.
Oversee application security capabilities across all segments to ensure consistent security practice implementation.
Define segment-specific requirements and approaches to address regulatory, operational, and risk considerations.
Maintain alignment of security practices across segments while allowing flexibility for business-specific needs.
Standardize processes, tooling, and reporting across segment app security teams.
Manage the organization’s application security testing program, including SAST, DAST, SCA, and IAST across all environments.
Ensure vulnerabilities are identified, assessed, prioritized, and remediated within the development lifecycle before deployment.
Establish secure coding standards and integrate security controls into CI/CD pipelines and development workflows.
Partner with development teams to reduce security technical debt and improve code quality.
Oversee runtime security controls for applications and APIs, including WAFs, API gateways, and runtime monitoring solutions.
Embed security requirements into application and API design, deployment, and operations.
Collaborate with engineering and infrastructure to enforce runtime protections aligned with enterprise architecture.
Monitor runtime risks and coordinate remediation across application environments.
Lead development and integration of application security tooling, including configuration, onboarding, and ongoing management.
Define use cases, policies, and detection logic for app security tools to ensure coverage and scalability.
Drive integration of application security tools into CI/CD pipelines and DevSecOps workflows.
Ensure tooling aligns with enterprise security architecture and standards.
Partner with Security Architecture to establish secure design patterns, reference architectures, and app security standards.
Incorporate application security requirements into solution design and architecture reviews.
Work with engineering to implement secure development lifecycle practices and controls.
Support evaluation of new technologies and architectures to ensure security alignment.
Ensure app security practices meet regulatory, compliance, and enterprise risk management standards.
Provide oversight for audits, regulatory assessments, and compliance reporting.
Collaborate with risk and compliance to translate app security risks into enterprise risk insights.
Support remediation of identified risks and align with risk tolerance and governance processes.
Define and track KPIs and KRIs related to app security posture, vulnerability management, and SDLC integration.
Deliver regular updates to executives on security risks, trends, and program effectiveness.
Use data analytics to drive ongoing improvement in application security practices and outcomes.
Identify opportunities to automate, streamline, and scale app security processes.
Partner with development, product, IT, security operations, and business teams to integrate app security into core enterprise processes.
Collaborate with Cyber Detection & Response to embed app security findings into monitoring and incident response workflows.
Coordinate with segment leaders to align app security initiatives with business priorities and risk considerations.
Support M&A activities by assessing and integrating app security controls for acquired applications.
Build and lead a high-performing app security organization with expertise in secure development, testing, and runtime protection.
Ensure the team’s capabilities stay aligned with evolving technologies, threats, and business needs.

Requirements

10+ years of cybersecurity experience with emphasis on application security, secure development, or DevSecOps.
Extensive expertise in SAST, DAST, SCA, and IAST testing methods and secure development practices.
Solid understanding of application and API security, cloud-native architectures, and modern development frameworks.
Experience leading enterprise-scale application security programs within large, complex organizations.
Knowledge of cybersecurity frameworks such as NIST CSF, OWASP, ISO 27001, and relevant regulatory requirements.
Proven ability to collaborate with cross-functional teams and influence executive leadership.
Strong leadership, communication, and problem-solving abilities.

Technologies

SAST
DAST
SCA
IAST
WAF
API gateways
CI/CD pipelines
DevSecOps workflows
Runtime monitoring solutions

Benefits

Medical, dental and vision coverage
Paid time off plan
Health savings account (HSA)
401k savings plan
Access to wages before pay day with myFlexPay
Flexible spending accounts (FSAs)
Short- and long-term disability coverage
Work-Life resources
Paid parental leave
Healthy lifestyle programs

Location

Cardinal, VA, remote. Open to candidates nationwide with fully remote work; preference for candidates near Central Ohio, with willingness to travel to the Dublin, OH corporate HQ as needed.

Posted

Posted date: 6/03/2026

Salary

135,400.00 - 208,100.00 Annual

Anticipated salary range

$135,400 - $208,100

Bonus eligible

Yes

Application window

Anticipated to close on 07/01/2026; applications encouraged as soon as possible.

Type

Full-time

View full job page →

Today

Senior Application Security Engineer

Calance US Houston, TX

Houston, TX

Today

$80 - $100/hr Full time Senior Ai Security Application Security

Apply Now

Job Description

Based in Houston, TX (hybrid), Calance US is seeking a Senior Application Security Engineer to embed security into the software development lifecycle using traditional SAST/DAST and AI-enabled tooling.

Responsibilities

Integrate security across the SDLC, CI/CD pipelines, and developers’ workflows
Lead and perform SAST, DAST, SCA, and API security testing
Utilize AI-powered code scanning to improve vulnerability detection, lower false positives, and speed remediation
Collaborate with developers to remediate vulnerabilities and promote secure coding practices
Conduct threat modeling and security reviews for applications and APIs
Collect and report security metrics, including vulnerability trends and remediation timelines
Deploy and manage AI-driven code scanning to analyze source code, APIs, and dependencies for security issues across the SDLC
Apply AI/ML capabilities to uncover complex vulnerability patterns and insecure coding practices that traditional tools may miss
Leverage AI to reduce false positives, improve signal-to-noise, and streamline triage of security findings
Use AI-assisted insights to perform root cause analysis and provide developers with actionable remediation guidance
Integrate AI-enabled scanning into CI/CD to deliver real-time feedback during development and at commit time
Evaluate and tune AI models and rulesets to enhance detection accuracy and align with enterprise risk priorities
Collaborate with engineering teams to embed AI-assisted code reviews and secure coding recommendations into developer workflows (pull requests, IDE plugins)
Monitor the effectiveness of AI-based scanning through metrics such as detection rates, reduced false positives, and remediation speed
Stay current on emerging AI security tools, LLM-based code analysis, and automated remediation technologies, and promote adoption where value is added

Requirements

Minimum seven years of experience in application security, DevSecOps, or secure software engineering
Solid understanding of OWASP Top 10 and secure coding standards
Hands-on experience with application security tooling, including SAST, DAST, and SCA
Proven ability to integrate security into CI/CD processes
Familiarity with Ghazdo and GitHub Advanced Security
Proficient in at least one programming language such as Python, Java, or JavaScript

Technologies

Python
Java
JavaScript
SAST
DAST
SCA
GitHub Advanced Security
Ghazdo

Role Overview

The Senior Application Security Engineer helps secure the software development lifecycle by combining traditional SAST/DAST approaches with AI-enabled tooling to identify and remediate code vulnerabilities. This role partners closely with development, DevOps, and security teams to drive secure coding practices and elevate the application risk posture at scale. It leverages AI-driven capabilities to improve vulnerability detection accuracy, automate code reviews, and accelerate remediation across the organization.

View full job page →

Static Application Security Testing Cybersecurity Jobs

Director, Application Security (Cybersecurity Defense)

Senior Application Security Engineer

Get Static Application Security Testing Cybersecurity Jobs alerts