Senior Application Security Engineer – Governance & Enablement

Location: San Antonio, TX or Plano, TX
* flexibility for exceptional candidates outside those locations.
Work Arrangement: Hybrid – 4 days per week onsite
Contract Length: 12 months
Position Type: Contract
Rate: $63-$65/Hr. Max

We are seeking a Senior Application Security Engineer to support application security governance, reporting, program coordination, and operational enablement. This role focuses on strengthening application security processes, improving visibility into program performance, and coordinating efforts across security, engineering, technology, risk, and compliance teams.

The successful candidate will help develop security metrics, dashboards, key performance indicators (KPIs), and executive reporting while supporting vulnerability management, software supply chain security, and Secure Software Development Life Cycle (Secure SDLC) governance.

This position also involves identifying opportunities to use automation and artificial intelligence to improve reporting, streamline workflows, and increase the effectiveness of application security operations.

• Support enterprise application security governance programs, including program coordination, reporting, and operational execution.

• Develop and maintain security metrics, dashboards, KPIs, and executive-level reports to communicate program performance and security trends.

• Monitor and report on application security activities, findings, and operational processes.

• Support vulnerability management processes and help track remediation activities and program outcomes.

• Assist with software supply chain security initiatives and Secure SDLC governance.

• Help maintain application security policies, standards, procedures, and governance documentation.

• Coordinate with security, engineering, technology, risk, and compliance teams to support application security requirements and initiatives.

• Communicate security program status, metrics, and recommendations to technical teams, management, and executive stakeholders.

• Use reporting and workflow tools to improve visibility, tracking, and coordination across application security activities.

• Identify opportunities to leverage automation and AI capabilities to improve reporting, governance, and operational efficiency.

• Support continuous improvement initiatives involving application security processes, standards, and program execution.

• Help ensure application security practices align with organizational policies, standards, and applicable regulatory expectations.

• Experience supporting enterprise Application Security or cybersecurity governance programs
  .

• Experience developing security metrics, dashboards, key performance indicators (KPIs), and executive reporting.

• Familiarity with vulnerability management, software supply chain security, and Secure SDLC governance.

• Strong understanding of cybersecurity policies, standards, procedures, and regulatory expectations.

• Experience coordinating initiatives across security, engineering, technology, risk, and compliance organizations.

• Strong written and verbal communication skills, including the ability to communicate with both technical and executive stakeholders.

• Experience with reporting and workflow platforms such as Power BI, Service Now, Jira, or equivalent tools
  .

• Experience leveraging automation and AI capabilities to improve reporting, governance, and operational processes.

• Relevant industry-recognized cybersecurity certifications, such as CISSP, CISM, Security+, or equivalent credentials
  .

The ideal candidate combines application security knowledge with strong governance, reporting, and program coordination skills. They can translate security data into meaningful metrics and executive reporting, work effectively across technical and business teams, and identify opportunities to improve application security operations through automation and AI-enabled processes.

Candidates with experience supporting enterprise cybersecurity programs, vulnerability management, Secure SDLC governance, and security performance reporting are encouraged to apply.