Sr. Application Security Engineer
Share
Job Location:
Iselin, NJ - USA
Monthly Salary:
Not Disclosed
Posted on:
1 hour ago
Vacancies:
1 Vacancy
Job Summary
Job Title: Sr. Application Security Engineer
Location: Iselin NJ Dallas TX Charlotte NC
Setting: Hybrid (3days onsite - 2days remote)
Type: Long Term Contract (LTC) Fulltime (FTE)
Type: Long Term Contract (LTC) Fulltime (FTE)
Sr. Application Security Engineer - Application Security Champion (ASC) Program
Functional Area: ASC CoP / Non-CIO ASCs
Role Summary:
- Scale the Application Security Champions (ASC) Community of Practice (CoP) across non-CIO units.
- Provide enablement tooling and standards to embed AppSec into decentralized teams.
- Align ASC initiatives with tiered control adoption and quarterly roadmap.
Key Responsibilities:
- Develop ASC playbooks training and office hours for threat modeling and secure design.
- Roll out CI/CD-integrated controls and AVR workflows tailored to non-CIO environments.
- Establish ASC KPIs and dashboards; report progress and compliance coverage.
- Coordinate migration planning with application owners; track risks and dependencies.
- Facilitate escalations and cross-functional alignment with SMEs and governance.
- Promote security awareness and culture by educating teams on secure coding practices potential threats and encouraging open dialogue around security.
- Act as the primary liaison between development teams and the security organization to ensure clear communication timely resolution of security concerns and alignment with security priorities.
- Lead security enablement activities including training sessions workshops and hands on exercises to enhance team security skills.
- Support secure development practices by performing secure code reviews participating in threat modeling sessions and assisting teams with effective use of security testing tools and automated scans.
- Contribute to organizational security standards by providing practical feedback and helping refine procedures to ensure they remain effective and adoptable across teams.
Required Qualifications & Skills:
- Bachelors degree or equivalent experience.
- 5 years in AppSec with enablement or CoP leadership experience.
- Proven ability to coach developers on secure coding and threat modeling.
- Experience with automation and compliance enforcement in CI/CD.
Preferred Qualifications:
- Experience establishing champions programs or communities of practice.
- Certifications: CSSLP CRISC or leadership-focused credentials.
- Background in enterprise governance and metrics.
Tools & Technologies:
- Learning platforms and LMS
- SAST/DAST/SCA
- ServiceNow AVR
- Dashboards (Power BI Grafana)
- Collaboration (Confluence Teams)
