Lead, Application Security & Red Team

Lead, Application Security & Red Team
Location: Bethlehem, PA - 3 days onsite
Terms: Full time

Position Overview:
Our client is seeking an experienced security professional who leads through influence, technical credibility, and ownership. The position blends hands-on application security and offensive security expertise with growing leadership responsibility.
The individual will support and evolve the company s Application Security Testing, Ethical Hacking (Red Team), and Third-Party Testing programs, while helping mature long-standing security capabilities into their next phase.
This is an ideal opportunity for a high-performing security practitioner ready to step into broader leadership over the next 2 3 years while remaining close to the work today.

Core Responsibilities
Program Execution & Oversight

• Lead day-to-day execution of:
  
  • Application Security Testing
  • Ethical Hacking / Red Team activities
  • Third-party penetration testing engagements
• Ensure consistency, structure, and measurable outcomes across assurance programs
• Coordinate testing activities across U.S. and India-based security assurance staff
• Oversee external testing vendors to ensure quality and impact

Program Evolution & Improvement

• Help mature a long-standing (20+ year) AppSec program
• Scale and enhance Red Team capabilities, including tooling and attacker emulation
• Improve documentation, standardization, and repeatability
• Contribute to roadmap planning, quarterly goals, and execution backlogs
• Identify opportunities for automation and AI-driven efficiencies

Hands-On Technical Leadership

• Remain actively involved in targeted application security testing
• Validate and rate high-risk or high-impact findings
• Provide technical guidance and quality assurance to engineers
• Participate in adversarial exercises where appropriate

Stakeholder & Risk Communication

• Translate technical findings into risk-based, actionable insights
• Communicate clearly with non-technical stakeholders
• Collaborate with Cyber Defense, application owners, and compliance teams to ensure remediation drives defensive improvement

Required Qualifications Experience

• 5+ years in Application Security, Ethical Hacking, or Offensive Security
• Demonstrated leadership responsibility (formal or informal)
• Experience evolving or improving an existing security program (not just building from scratch)
• Experience coordinating global teams and/or third-party vendors

Technical Expertise Strong understanding of:

• Application security testing techniques
• Penetration testing vs. Red Team objectives and outcomes
• Secure SDLC and risk-based testing
• Validating vulnerabilities and security control effectiveness

Estimated Min Rate: $150000.00
Estimated Max Rate: $170000.00


What s In It for You?
We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh s extensive talent community that will provide you with access to Yoh s vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh s hiring clients preferences. To learn more about Yoh s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice