Application Security Remediation Technical Lead

Quick Facts

• Role: Application Security Remediation Technical Lead (Remote)

• Focus: Technical leadership for application security remediation across multiple teams

Description

Lead application security remediation across multiple teams for a large-scale security initiative, acting as the escalation point for complex vulnerabilities and architecture issues. Partner with engineering and security stakeholders to prioritize risk, set remediation standards across secure SDLC and CI/CD, and ensure vulnerabilities are only closed after review, testing, and release validation. Use AI-assisted engineering tools to analyze code and recommend fixes, while guiding testing and mentoring teams to operate independently.

Responsibilities

• Lead technical direction across two remediation teams; escalate complex vulnerabilities, architecture issues, dependencies, and release constraints

• Prioritize vulnerabilities using risk, exposure, business impact, dependencies, and release readiness

• Establish remediation standards for secure coding, code reviews, testing, CI/CD controls, releases, and vulnerability closure

• Analyze findings within the broader application architecture to determine dependencies and remediation strategies

• Use AI-assisted engineering tools to analyze code, understand legacy dependencies, recommend fixes, generate tests, and prepare changes for human review

• Guide unit, functional, regression, and security testing to confirm fixes resolve vulnerabilities without breaking expected functionality

• Ensure vulnerabilities are not closed until code review, validation/testing, release confirmation, and supporting evidence are complete

• Develop reusable secure coding patterns and remediation approaches (including AI-enabled resources) to improve consistency and efficiency

• Identify cross-team risks, dependencies, blockers, and capacity constraints; communicate progress and recommendations to technical and executive stakeholders

• Mentor technical leads and implement repeatable processes that enable independent team operation

Requirements

• 10+ years of software engineering experience, including 5+ years leading application security remediation, secure modernization, or multiple engineering workstreams

• Deep Microsoft-stack experience: .NET Framework/modern .NET, C#, ASP.NET MVC/ASPX/Razor, REST APIs, SQL Server, T-SQL/stored procedures, Git, and Azure DevOps

• Hands-on application security remediation experience, including OWASP Top 10 and CWE/CVE-based findings

• Experience with SAST, DAST, software composition analysis (SCA), secure SDLC, DevSecOps, and CI/CD security controls

• Ability to analyze application architecture and dependencies to determine upstream/downstream impacts of vulnerabilities and proposed fixes

• Practical experience applying AI to software engineering, including context/prompt design, output validation, governed tool usage, and human review of AI-generated recommendations or code

• Understanding of security/privacy considerations when using AI tools with sensitive data (PHI, PII, credentials, secrets)

• Ability to make sound technical decisions when scanner findings, AI recommendations, and operational requirements conflict

• Strong communication skills for explaining technical risk, remediation decisions, progress, trade-offs, and capacity needs

Benefits

• Comprehensive medical/dental/vision insurance

• HSA and FSA

• 401(k)

• Life, disability & ADD insurance

• Paid time off for salaried personnel

• Hourly employees not eligible for paid time off unless required by law; paid sick leave may apply for certain projects