Inactive
G

Gartner

Sells research and advice to business leaders

Lead Application Security Engineer

Security Engineering & ArchitecturePosted on Oct 2
Full-time$116k - $170k

About the Job

Requirements

  • At least 7 years of experience in a Security Engineering role, with proven experience in DevSecOps, Cloud Security, and Application Security.
  • Experience using vulnerability scanning technologies, application security testing platforms, and cloud security tooling.
  • Formal experience with threat modeling.
  • Experience leading projects, initiatives, and resources through direct and indirect leadership.
  • Deep knowledge of assessing and prioritizing risk, with the ability to think like an attacker and use that context to conduct threat models.
  • Cloud experience with AWS, Azure, or GCP.
  • Knowledge of Infrastructure as Code and Policy as Code concepts.
  • Proven communication, collaboration, and critical thinking skills.
  • Ability to build trusting, meaningful relationships with peers, stakeholders, partners, and suppliers.
  • Ability to define and communicate risk in business-relevant language to technical and non-technical audiences.
  • Ability to apply expert knowledge to solve complex business and technical issues strategically.

Responsibilities

  • Collaborate with business stakeholders to design secure applications, test applications for security weaknesses, and partner on remediation of identified issues.
  • Mentor engineers and security champions on practical threat modeling techniques.
  • Triage and prioritize security risks, vulnerabilities, and exceptions in alignment with business impact and risk tolerance.
  • Coordinate the orchestration, automation, and management of security technologies and platforms.
  • Own day-to-day lifecycle management, including identification, threat assessment, threat modeling, and risk avoidance.
  • Create actionable reports showing direct impact to the security posture.
  • Define and implement meaningful metrics to measure the effectiveness of security controls through key risk indicators and security scorecards.
  • Serve as a subject-matter expert for Application Security and act as a first point of contact for critical issues, security risk assessments, and triaging CI/CD issues with partners and stakeholders.
  • Evaluate business and technical requirements to identify and implement tools, processes, and technologies that improve security posture.
  • Use data to drive prioritization, highlight systemic issues, and influence roadmap decisions.

Desired Qualifications

  • Familiarity with technical security controls, guidelines, and frameworks such as SOC 2, ISO 27001/27013, and NIST 800-53.
  • Ability to automate tasks and code solutions to repetitive problems.
  • Scripting or programming experience with Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, or Bash.
  • Experience with penetration testing and web application assessment.

About the Company

Gartner

Sells research and advice to business leaders

Gartner sells business and technology research to executives and their teams, along with advice for decisions about strategy, spending, and operations. Clients use its reports, benchmarking tools, and conversations with experts to evaluate vendors, compare practices, and plan investments. Its consulting teams work on technology strategy and complex projects, while conferences bring leaders together for expert sessions and peer discussions. The company earns revenue from research subscriptions, consulting engagements, and conference attendance, serving organizations across many sectors. Gartner was founded in 1979 and is headquartered in Stamford, Connecticut.

Company size
10,001+
Company stage
IPO
Headquarters
Stamford, CT
Founded
1979

Recently Posted Jobs

Explore more opportunities at Gartner

See more jobs