Director level individual contributor, responsible for Application Security (AppSec) tooling architecture and strategy for vulnerability management. Lead tooling selection, integration, and automated security control implementation (SCA, SAST, DAST) within developer workflows (SCM, CI/CD) to align with industry frameworks (e.g., NIST SSDF, BSIMM). Establish metrics to measure AppSec posture and performance. Collaborate with internal and external partners to influence product roadmaps, enhance… Show more Director level individual contributor, responsible for Application Security (AppSec) tooling architecture and strategy for vulnerability management. Lead tooling selection, integration, and automated security control implementation (SCA, SAST, DAST) within developer workflows (SCM, CI/CD) to align with industry frameworks (e.g., NIST SSDF, BSIMM). Establish metrics to measure AppSec posture and performance. Collaborate with internal and external partners to influence product roadmaps, enhance Developer Experience (DevEx), and expand Secure Development Lifecycle (SSDLC) and vulnerability management capabilities. Establish processes for tooling administration and governance. Maintain strategy and oversight for DevSecOps (DSO) program and SSDLC capability adoption.Tools: Veracode, AppScan Enterprise, GitHub Advanced Security (CodeQL, Dependabot), JFrog (Xray), and ServiceNow (SecOps) Show less