Lead AppSec Engineer

Location: Hybrid environment near the Irving, TX or Stamford, CT Centers of Excellence, United States

Base salary: USD 116,000–170,000 per year, plus eligible annual bonus or role-based incentive plan.

Company

hirify.global provides business and technology insights and digital solutions for enterprise leaders and their teams.

What you will do

• Design secure applications, perform security testing, identify weaknesses, and coordinate remediation with business and technology stakeholders.
• Mentor engineers and security champions on threat modeling and serve as an Application Security subject-matter expert.
• Triage and prioritize vulnerabilities, security risks, exceptions, and CI/CD issues according to business impact and risk tolerance.
• Coordinate security technology and platform management, including automation, integrations, and lifecycle activities.
• Create security posture reports, KRIs, and scorecards to measure control effectiveness and highlight systemic issues.
• Evaluate requirements and use data to improve tools, processes, technologies, and security roadmap decisions.

Requirements

• 7+ years of experience in a Security Engineering role, including proven experience in DevSecOps, Cloud Security, and Application Security.
• Experience with vulnerability scanning technologies, AST platforms, and cloud security tooling.
• Formal experience with threat modeling and deep knowledge of risk assessment and prioritization.
• Experience leading projects, initiatives, and resources through direct and indirect leadership.
• Cloud experience with AWS, Azure, or GCP.
• Knowledge of Infrastructure as Code and Policy as Code concepts.
• Strong independent critical thinking, problem-solving, communication, collaboration, and relationship-building skills.
• Ability to communicate risk in business-relevant language to technical and non-technical audiences and solve complex business and technical issues strategically.

Nice to have

• Familiarity with SOC2, ISO 27001/27013, and NIST 800-53 security controls, guidelines, and frameworks.
• Ability to automate tasks and code solutions for repetitive problems.
• Scripting or programming experience with Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, or Bash.
• Experience with penetration testing and web application assessment.

Culture & Benefits

• Hybrid work with flexibility to work from home and collaborate in company offices.
• Competitive compensation, annual bonus or role-based incentive eligibility, and employee stock purchase opportunities.
• 20+ PTO days plus holidays and floating holidays in the first year.
• Medical, dental, vision, 401(k) with corporate match and immediate vesting, parental leave, tuition reimbursement, and wellness allowances.
• Mentorship, leadership courses, technical training, certification opportunities, and ongoing learning programs.
• Collaborative, inclusive culture with opportunities to contribute to hirify.global’s technology and AI initiatives.