Senior Application Security Engineer Vulnerability Operations
Location: Charlotte/NC/Onsite
Role Summary:
The Senior Application Security Engineer serves as a technical and operational leader within the Vulnerability Operations function. This role drives large-scale adoption of application security controls, partnering closely with engineering teams and the Application Security Champion community to ensure secure design, development, and deployment across the enterprise. You will lead strategic control rollouts, guide vulnerability governance, address emerging threat classes, and provide expert escalation support for the most complex AppSec issues.
Key Responsibilities:
Strategic Leadership & Program Enablement
Lead the enterprise-wide operationalization of AppSec controls, ensuring scalable integration across CI/CD pipelines and diverse engineering environments.
Partner with the Application Security Champion team to embed secure development practices, coordinate training, share emerging vulnerability insights, and drive decentralized security ownership.
Own the tiered security control strategy (Tier 1 3), defining quarterly migration targets and ensuring cross-portfolio alignment.
Advanced Vulnerability & Threat Management
Act as subject-matter expert for advanced and emerging vulnerability classes (e.g., supply chain risks, AI/ML application threats, container/Serverless misconfigurations, emerging OWASP categories).
Lead complex vulnerability triage and remediation efforts; facilitate cross-team deep-dive sessions to drive prioritization and timely mitigation.
Conduct proactive threat modeling and security design reviews for high-risk or business-critical applications.
Automation & CI/CD Security Architecture
Architect scalable CI/CD integrations for SAST, DAST, SCA, and secrets scanning using policy-as-code, automated gating, and risk-based controls.
Implement and optimize Tier 3 merge-prevention and build-failure gates, ensuring engineering teams meet strict compliance requirements.
Develop reusable automation frameworks, scanning templates, and pipeline modules to accelerate secure software delivery.
Never miss an opportunity! Create an alert based on the job you applied for.
