Application Security Team Lead

Location: Oklahoma City, OK

Description

The role of the Team Leader of Application Security is to provide direction and guidance to direct reports to both grow and define an individual’s career path. Team Leads are responsible for leading Application Security Analysts in the identification and remediation of security vulnerabilities in our application and for building strong relationships with development and application support staff. Additionally, Leaders will provide oversight and planning for Application Security projects, give guidance on technical secure solutions for development, and train Application Security Analysts on new technology and security concepts.

RESPONSIBILITIES

• Build and maintain a strong relationship with direct reports to help with career growth, development, performance, and promotions

• Work alongside development, IT, and application support staff to achieve department and company goals

• Support staff in complex issues with a strong working knowledge of OWASP, NIST, and other applicable security standards

• Participate and support development in languages such as PHP, C#, Golang, .NET Core, Python

• Train new department staff and developers in application security concepts

• Develop and lead application security projects, in areas such as: development, penetration testing, and/or system procurement

• Help create and cast a vision for the department that meets goals set out by management

• Create and maintain department processes, training curriculum, and projects in line with current department vision

• Continue to learn and follow trends in the security space

• Maintain metrics and reports that are visible to staff and management to help measure performance and assist in coaching/development conversations

• Assist in developing interview questions, assessing potential employees, and giving guidance to final hiring decisions

• Take proactive steps to identify and resolve problems within the department or application

• Maintain a professional working relationship with other departments through clear communication and project level collaborations

• Ability to work flexible hours, including weekends and evenings if needed and respond to emergencies

• Delegate tasks and responsibilities to direct reports as necessary and perform additional duties and assignments as requested

Qualifications
MINIMUM BASIC QUALIFICATIONS
Education/Certification:

• Degree in Technology

Experience:

• Experience with containerization technology, web languages, code repositories

• 4+ years’ experience in industry with Bachelor’s degree or 2+ years’ experience with Masters degree

• Strong knowledge of application vulnerabilities, exploits, and remediation techniques

• Familiar with dynamic/static testing tools, secure coding principles, and application architecture

• Comfortable with public speaking and training others on security principles

• Prior leadership experience

• Excellent communication skills

• CSSLP, CISSP, GWAPT, OSCP, or similar certifications

PREFERRED QUALIFICATIONS
Education/Certification:

• Degree in Computer Science, Management Information Systems, Cyber Security, or Information Technology