Application Security Specialist

Job Description: Look for someone who has Application Security experience, has worked closely with software developers, conducted threat modeling and secure coding activities, integrated security tools into CI/CD pipelines, and ideally built or led a Security Champions Program or Community of Practice. Leadership, enablement, training, and influencing engineering teams are more important than deep penetration testing or network security experience.

• Security Gates

• Pipeline Security

• Compliance Automation

• Security Controls

• Continuous Security Testing

Security Testing Tools

• SAST

• DAST

• SCA

• Static Analysis

• Dynamic Testing

• Software Composition Analysis

• Vulnerability Management

Governance & Metrics

• Security Metrics

• KPIs

• Dashboards

• Compliance Reporting

• Risk Management

• Risk Register

• Governance

• Security Controls

Collaboration

• Cross-Functional Leadership

• Stakeholder Management

• Program Management

• Change Management

• Community of Practice (CoP)

• Security Champion Program, * Mend (WhiteSource)

CI/CD

• Jenkins

• GitHub Actions

• GitLab CI/CD

• Azure DevOps

Dashboards

• Power BI

• Grafana

• Splunk

Collaboration

• ServiceNow

• Confluence

• Jira

• Microsoft Teams, * Ethical hacking
• Red teaming
• Bug bounty, * Kubernetes
• Terraform
• AWS deployment

Need AppSec ownership and security leadership. __________________

1. Certifications to Prioritize

Strong:

• CSSLP
• CISSP
• CRISC

Good:

• GWAPT
• GWEB
• CASE
• Security+

Nice to Have:

• Scrum Master
• SAFe
• PMP