Application Security Lead Specialist

Job Title : Application Security Lead Specialist

Location : Huntsville Alabama

Experience : 12 Years

Employment Type : Contract

Interview Type : In-Person or Webcam

Job Description

We are seeking an experienced Application Security Lead Specialist with strong expertise in security architecture secure software development vulnerability management and risk mitigation for enterprise applications. The ideal candidate will lead application security practices collaborate with engineering teams and implement best-in-class security controls across the SDLC.

Key Responsibilities

Lead the application security program and define security standards policies and best practices.

Perform security architecture assessments threat modeling and design reviews for new and existing applications.

Conduct secure code reviews penetration testing vulnerability scanning and analysis of security findings.

Collaborate closely with development DevOps QA and product teams to integrate security into the SDLC.

Manage and prioritize remediation of vulnerabilities and guide engineering teams on mitigation strategies.

Drive implementation of security automation and tooling across CI / CD pipelines.

Evaluate and integrate third-party security technologies and frameworks.

Prepare security documentation risk assessments and executive-level reporting.

Train internal teams on secure coding practices and application security awareness.

Ensure compliance with security and regulatory requirements such as NIST ISO FedRAMP or similar frameworks.

Required Qualifications

12 years of IT experience with at least 7 years in Application Security.

Strong hands-on experience with security testing tools such as SAST DAST IAST SCA (examples : Veracode Checkmarx Fortify Burp Suite OWASP ZAP).

Deep knowledge of OWASP Top 10 secure SDLC threat modeling and secure architecture principles.

Experience with Cloud environments such as AWS Azure or GCP security controls.

Strong background in DevSecOps CI / CD pipelines and automation.

Proficiency with programming languages such as Python JavaScript or similar for code review.

Experience with API and microservices security.

Familiarity with regulatory standards and compliance frameworks.

Excellent communication and stakeholder management skills.

Preferred certifications : CISSP CSSLP CEH OSCP or GWAPT.

Key Skills

Laboratory Experience,SQL,Accounts Receivable,.NET,DICOM,Cash Application,Product Demos,Sonography,Customer Support,Medical Imaging,Technical Support,Application Support

Experience : years

Vacancy : 1