Application Security Engineer ASC CoP​/Non-CIO

Overview

Sr. Application Security Engineer - ASC CoP / Non-CIO ASCs

Location:

1st preferred location - NJ, Iselin; 2nd location - Charlotte, NC, 5 Days Onsite

Functional Area:

ASC CoP / Non-CIO ASCs

Scale the Application Security Champions (ASC) Community of Practice across non-CIO units. Provide enablement, tooling, and standards to embed App Sec into decentralized teams. Align ASC initiatives with tiered control adoption and quarterly roadmap.

• Develop ASC playbooks, training, and office hours for threat modeling and secure design.
• Roll out CI/CD-integrated controls and AVR workflows tailored to non-CIO environments.
• Establish ASC KPIs and dashboards; report progress and compliance coverage.
• Coordinate migration planning with application owners; track risks and dependencies.
• Facilitate escalations and cross-functional alignment with SMEs and governance.

• Bachelor's degree or equivalent experience.
• 5+ years in App Sec with enablement or CoP leadership experience.
• Proven ability to coach developers on secure coding and threat modeling.
• Experience with automation and compliance enforcement in CI/CD.

• Experience establishing champions programs or communities of practice.
• Certifications:
  
  CSSLP, CRISC, or leadership-focused credentials.
• Background in enterprise governance and metrics.

• Learning platforms and LMS
• SAST/DAST/SCA
• Service Now AVR
• Dashboards (Power BI, Grafana)
• Collaboration (Confluence, Teams)

Thank you for your interest.