Application / API Security Lead

Hybrid in Chicago, IL, US • Posted 2 days ago • Updated 2 days ago

Contract W2

Contract Independent

No Travel Required

Hybrid

Depends on Experience

MindFore Inc

Fitment

Dice Job Match Score™

🤯 Applying directly to the forehead...

Job Details

Skills

application/API assets
CISSP
CISM

Summary

Job Title: Application & API Security Lead – Vulnerability Program Management

Location: Hybrid (Chicago Area Preferred)

Overview: Provide expert support for developing, evaluating, and operationalizing vulnerability management metrics, controls, and reporting for Applications and APIs, including supporting assets like Container Security and Web Application Firewall (WAF). This role requires technical experience in application security, cloud environments (80% Azure), and leadership to act as a mini-CISO or program manager, ensuring compliance to standards and governance.

Key Responsibilities

Inventory and assess application/API assets, including support structures (e.g., Container Security Program, WAF using tools like Akamai).
Develop target state KRI and KPI metrics (non-RAS) with rationale, refresh inventory and metrics annually.
Collect and evaluate existing metrics; identify and document new metrics based on target state needs; conduct annual re-analysis.
Assess data availability for metrics; develop plans to capture missing data and update proposals.
Draft KRI/KPI proposals, including thresholds; obtain 2LOD review, align on feedback, and update as required.
Conduct annual reviews of related policies, standards, and controls.
Evaluate current controls for metric reporting; propose/document updates or new controls; obtain 2LOD review and sign-off.
Prepare/maintain documentation for controls and metrics; provide evidence of reviews, approvals, and ongoing support.
Lead teams in establishing reporting and governance; integrate CICD pipelines, migrate to tools like Snyk for security scanning.

Qualifications

Bachelor’s degree in computer science, Information Security, or related field.
7+ years in application security, with experience in APIs (e.g., Fortify/Sneak), WAF (e.g., Akamai), cloud security (Azure preferred), and vulnerability management.
Strong leadership skills; experience as a program manager or in governance/compliance roles.
Familiarity with tools like Defender for Cloud, Azure Security Center.
Excellent communication skills for stakeholder engagement and 2LOD reviews.

Preferred:

Certifications: CISSP, CISM, or cloud-specific (e.g., Azure Security Engineer).
Experience in financial services or regulated environments (e.g., addressing MREs like material weaknesses).

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91117512
Position Id: 8859644
Posted 2 days ago

Company Info

About MindFore Inc

Founded in 2016, Mindfore is a Professional IT consulting company dedicated to providing high-quality workforce solutions and expert consulting services.With a strong track record of success and a commitment to client satisfaction, we offer comprehensive solutions tailored to meet the unique needs of our clients. Our experienced team of professionals possesses deep industry knowledge an and expertise, enabling us to deliver exceptional results.

Mindfore is your premier destination for top-tier IT services, solutions, and staffing. Devoted to delivering superior workforce solutions and expert consulting services, we boast a robust history of success and an unwavering commitment to client contentment. Our comprehensive solutions are meticulously crafted to address the distinct needs of our clients. Anchored by a team of seasoned professionals with profound industry knowledge, we bring unparalleled expertise to every project, ensuring exceptional outcomes. At Mindfore, we are not just a service provider; we are your trusted partner dedicated to elevating your business to new heights.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.