Qureos Mentor

Glocomms

<div>
 
 
 Overview
 
 
 
 Glocomms is partnered with a leading financial services firm to identify an accomplished Application Security professional to help drive secure software delivery at scale within a modern, cloud-first environment operating under a hybrid work model. The successful candidate will be responsible for defining and executing the application security strategy across the organization's software development life cycle. This individual will work closely with engineering, platform, and cloud teams to embed security controls, tooling, and guardrails into CI/CD pipelines, enabling secure and scalable application delivery without compromising developer experience or delivery velocity.
 
 This is a hybrid opportunity based in Pennsylvania, Dallas, or Charlotte.
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define and drive the application security strategy and roadmap aligned with enterprise security and governance objectives
 </li>
 <li>
 Embed security across the Secure SDLC, CI/CD pipelines, and cloud-native delivery processes
 </li>
 <li>
 Integrate, automate, and operate application security tooling (SAST, SCA, IAST, RASP) at scale
 </li>
 <li>
 Establish security guardrails, controls, and scan coverage across repositories, pipelines, and environments
 </li>
 <li>
 Partner closely with developers through code reviews, agile ceremonies, and feedback loops to enable secure-by-design delivery
 </li>
 <li>
 Lead vulnerability assessment, risk prioritization, and remediation guidance
 </li>
 <li>
 Measure and report on application security maturity, metrics, and coverage
 </li>
 <li>
 Ensure security best practices and standards adherence across cloud, container, serverless, mobile, and emerging technologies
 </li>
 <li>
 Provide hands-on technical leadership while optimizing developer experience and usability
 </li>
 </ul>
 
 
 Required Experience &amp; Skills
 
 
 <ul>
 <li>
 Undergraduate degree in a related field or equivalent combination of training and experience.
 </li>
 <li>
 Strong background in Application Security, DevSecOps, or Secure Software Engineering
 </li>
 <li>
 Experience securing modern application environments, including cloud, containers, and serverless architectures
 </li>
 <li>
 Proven expertise integrating security into CI/CD pipelines, source code repositories, and IDEs
 </li>
 <li>
 Hands-on knowledge of application security testing tools and vulnerability management workflows
 </li>
 <li>
 Solid understanding of secure coding practices, modern programming languages, and SDLC processes
 </li>
 <li>
 Familiarity with OWASP Top 10, NIST, MITRE, and industry security standards
 </li>
 <li>
 Ability to collaborate effectively with engineers, platform teams, and security leadership
 </li>
 <li>
 Experience using metrics and risk-informed decision making to guide security priorities
 </li>
 </ul>
 
 
</div>

Application Security Engineer

Join Glocomms and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Glocomms

About Company

Application Security Engineer