LeadApplicationSecurityEngineer

The Lead Application Security Engineer provides enterprise-level technical leadership and strategic direction for application security across the organization. This role is a senior individual contributor responsible for defining, governing, and evolving application security architecture, standards, tooling, and DevSecOps practices to ensure security is built into applications by design. This role does not include direct people management but serves as a technical leader, mentor, and escalation point for complex application security initiatives. **Key Responsibilities:** * Define, own, and govern application security architecture standards, patterns, and requirements across development teams. * Provide senior-level technical leadership, including review and approval of designs for complex, high-risk, or business-critical applications. * Lead or co-own the design, implementation, and ongoing maturity of the enterprise DevSecOps program. * Evaluate, select, and govern application security tooling, including defining usage standards, coverage expectations, and success metrics. * Perform advanced threat modeling and security architecture reviews for externally exposed or high-impact applications. * Act as the primary application security subject matter expert for development and platform teams. * Define, track, and report application security metrics and KPIs to assess program effectiveness and inform leadership. * Serve as a technical mentor and final escalation point for complex application security issues. * Partner with Governance, Risk, and Compliance teams to support secure development training and awareness initiatives. **Required Knowledge, Skills and Abilities:** * Bachelor’s degree in computer science, Information Technology, Engineering, or a related technical field, or equivalent practical experience. * Minimum of five (5) to seven (7) years of professional experience in information technology, with at least three (3) years focused on application security or