DIRECTOR OF APPLICATION SECURITY- REMOTE

Job Summary

This hands-on management role will serve as part of the Compass Group North America Cybersecurity team, working closely with application development and IT teams to implement the Application Security program. This role will engage with internal and external stakeholders to drive prompt remediation of vulnerabilities, and ensure applications developed are secure by design.
 

Key Responsibilities

• Lead and support the Application Security team, establishing team and individual goals that support program objectives and department goals. 
• Recruit, train, and mentor staff. Conduct regular performance appraisals.
• Evaluate and secure applications by driving adoption of secure coding frameworks and industry best practices; develop standards and training materials to assist development teams in building security into new and existing applications. 
• Drive the adoption of the Application Security technology stack, standards, policies, and frameworks across all Compass Group North America business sectors. Ensure consistent engagement and compliance.
• Maintain and develop documentation, including technical manuals, best practices, and standard operating procedures.
• Lead meetings and deliver presentations for different audiences, including development teams and senior leadership.
• Provide continuous feedback and education on security best practices and methodologies to resolve vulnerabilities and mitigate risk.
• Contribute to the review of internal processes and activities, and assist in identifying potential opportunities for improvement and automation.
   

Job Qualifications

• 1+ years of management experience, with a successful track record of building teams and driving program improvement
• 5+ years of software development or IT architecture/engineering experience
• 3+ years of technical project or portfolio management experience
• Experience with the integration of tools into development pipelines
• Understanding of a broad range of Application Security issues as well as their mitigation strategies
• Experience with scripting or object-oriented programming languages such as JavaScript, Python, Java, or C#
• Comfort with performing code review and working with developers to remediate vulnerabilities and apply secure coding best practices
• Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into digestible pieces of information
• Bachelor's degree in Computer Science, Information Security or related field. Additional, relevant experience may be considered in lieu of a degree.

Preferred:

• Knowledge of manual testing tools such as Burp Suite Pro
• 2+ years’ experience working with SAST/DAST/SCA application security tools such as: Rapid7 InsightAppSec, SonarQube, Dynatrace, Veracode, Checkmarx, WhiteSource, etc.
• Standard industry certifications desired