Director, Application Security

Intercontinental Exchange Holdings, Inc.•Atlanta, GA

About The Position

As a Director in this role, you will lead two teams responsible for assuring secure software development and cloud security through education, continuous testing, and consultation. This position requires a leader committed to continuous education and being a recognized industry leader in Application and Cloud Security. The role involves managing an established enterprise AppSec program at scale, with over 2,000 applications and a large pool of developers. You will coach and develop team leaders within a high-performing team and ensure the effective operation of all program areas, distilling results into meaningful metrics. The Director will articulate and communicate the Application and Cloud Security programs through writing and discussion.

Requirements

Bachelor's degree in Computer Science, Engineering, MIS, CIS, or a related discipline.
Hands-on or program-level experience applying AI in the AppSec space.
Software engineering experience in Java, C++, Python, and/or related languages.
Hands-on experience with information security and related technologies.

Nice To Haves

Background in financial services or a comparable regulated enterprise environment.
Technical expertise and understanding of AWS and/or Azure cloud platforms.
Hands-on experience with information security and related technologies.
Participation and leadership in Application Security consortia such as OWASP.

Responsibilities

Lead two teams responsible for assuring secure software development and cloud security through education, continuous testing, and consultation.
Differentiate FUD and hype from legitimate business risk and assign practical severity ratings to detected weaknesses.
Demonstrate compromise of detected vulnerabilities to educate and motivate development teams.
Adopt and improve on an established education, testing, and remediation methodology.
Innovate and ensure all areas of the programs are operated effectively and results are distilled into meaningful metrics.
Articulately codify and communicate the Application and Cloud Security programs through writing and discussion.
Recruit, retain, and motivate highly talented staff, balancing task allocation with talent engagement, challenge, and growth.
Successfully run an established enterprise AppSec program at scale, with 2,000+ applications and a large pool of developers.
Coach and develop team leaders, including newer leadership hires, within an already high-performing, well-structured team.
Be committed to continuous education and being a recognized industry leader in Application and Cloud Security.
Oversee Application Identification and Review: maintenance, execution, and reporting of AppSec assurance tasks from Design Review through operating a Bug Bounty program.
Own the Application Development Security Policy and ensure timely, practical updates, communication, and education.
Establish security requirements early in the SDLC and contribute security subject matter expertise during the development of new projects and releases.
Implement and maintain cutting-edge technology to assess and protect applications and cloud environments throughout the SDLC and post deployment.
Evaluate and apply AI and machine learning capabilities within the AppSec space, including AI-assisted vulnerability detection, AI-powered code review and testing tooling, and securing AI-integrated development pipelines.
Keep software engineers apprised of secure coding practices and build strong rapport and respect with the ICE application development community.
Provide security leadership and solutions to business and technical teams as they look to build or buy products in the cloud.
Operate a responsible disclosure program that appropriately incentivizes and fosters positive relationships with security researchers.