Lead AppSec Engineer

About the role

The Lead Security Engineer will support Gartner’s AppSec function. Key responsibilities include:

• Executing daily vulnerability assessments
• Working with IS partners and technology stakeholders to identify risks and vulnerabilities
• Collaborating on remediation efforts and prioritizing risk remediation
• Implementing security tools, technologies, and controls
• Engineering automation solutions and/or security tool integrations
• Providing education and training on security practices
• Creating reports on security posture
• Defining and implementing metrics to measure security control effectiveness
• Serving as a subject matter expert for Application Security
• Addressing critical issues, security risk assessments, and CI/CD issues

Responsibilities

Key duties include:

• Designing secure applications and testing for security weaknesses
• Mentoring engineers and security champions on threat modeling
• Triaging and prioritizing security risks and vulnerabilities
• Coordinating security technologies and platforms
• Managing the day-to-day lifecycle of security activities
• Evaluating business and technical requirements to implement security tools and processes
• Using data to drive prioritization and influence roadmap decisions

Requirements

Qualifications required:

• 6-8 years of experience in a Security Engineering role
• Proven experience in DevSecOps, Cloud Security, and Application Security
• Experience with vulnerability scanning technologies, AST platforms, and cloud security tooling
• Formal experience with threat modeling
• Experience leading projects, initiatives, and resources
• Deep knowledge of assessing and prioritizing risk
• Cloud experience (AWS, Azure, GCP)
• Infrastructure as Code (IaC) and Policy as Code (PaC) concepts

Skills

Nice to have:

• Familiarity with technical security controls, guidelines, and frameworks such as SOC2, ISO 27001/27013, NIST 800-53
• Scripting or programming experience (Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash)
• Experience with penetration testing and web application assessment

Benefits

At Gartner, you will enjoy:

• Competitive compensation
• Limited growth and learning opportunities
• Ongoing mentorship and apprenticeship
• Leadership courses, development programs, technical courses, certification opportunities
• A collaborative and positive culture
• A chance to make an impact
• Flexible working arrangements
• 20+ PTO days plus holidays and floating holidays in your first year
• Extensive medical, dental insurance and vision plans
• 401K with corporate match, immediate vesting
• Health-and-wellness-related allowance programs
• Parental leave
• Tuition reimbursement
• Employee Stock Purchase Plan
• Employee Assistance Program
• Gartner Gives Charity Match
• And much more!

Pay

Base salary range: $116,000 - $170,000

Schedule

Hybrid work environment, combining remote work with in-office collaboration.