Similar Jobs
See allApplication Security Analyst
EMCOR Group, Inc.
US
Application Security
DevSecOps
CI/CD
Product Security Engineer
Doppel
US
Cloud Security
Python
Threat Modeling
Senior Professional Services Technical Architect - Security
GitLab
North America
Security Architecture
DevSecOps
GitLab
Full-Stack Engineers: Interview on Cybersecurity and CI/CD Pipelines
Terac
Global
Cybersecurity
CI/CD
Vulnerability Management
Senior Product Security Engineer (Contract)
Iru
US
Application Security
Threat Modeling
Penetration Testing
Security Leadership:
- Perform secure design and architecture reviews with engineering teams.
- Lead threat modeling sessions using STRIDE, DREAD, or PASTA methodologies.
VIPR Integration:
- Own application-layer vulnerability management from detection through remediation and validation.
- Track VMDR metrics such as MTTD, MTTR, exposure windows, and remediation effectiveness.
Automation & Tooling:
- Build and maintain automated AppSec pipelines for SAST, DAST, SCA, and API security testing.
- Collaborate with DevOps to integrate security scanning into CI/CD pipelines.
Engineering Partnership:
- Develop and maintain secure coding standards for React, Node.js, Python, Java, and Go.
- Mentor engineers and security champions; deliver secure coding training and threat modeling workshops.
ServiceNow
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.