Senior Application Security Champion

TEKsystems•Irving, TX

3d•$70 - $74•Hybrid

About The Position

Our large financial client is seeking an experienced application security professional who has exposure to AI/LLM Enabled Applications. The client is not seeking an AI expert but rather a skilled application security professional who has some experience in AI as it pertains to this job. This role is 3 days on site and will require experience in the following tops skills. Top Skills' Details 1. 5+ years of application security experience with developer enablement - Experience with SAST/DAST/ SCA 2. Hands on experience securing AI/LLM-enabled applications, including prompt injection and data leakage risk mitigation 3. Familiarity with RAG architectures, vector databases, and agentic frameworks- ability to advise on isolation/guardrail patterns 4. Deep experience with python to automate security testing and extend/customize adversarial testing probes 5. Experience working with developers on secure coding and threat modeling 6. Experience with automation and compliance enforcement in CI/CD Description Role Summary: • Scale the Application Security Champions (ASC) Community of Practice (CoP) • Provide enablement, tooling, and standards to embed AppSec into decentralized teams. • Align ASC initiatives with tiered control adoption and quarterly roadmap. Key Responsibilities: AI Security (LLM/GenAI) responsibilities may include: Operationalize LLM adversarial testing (e.g., garak-based testing) and integrate into CI/CD as a standard control for AI-enabled applications. Define and maintain AI "Golden Test Suites" that AI-enabled applications must pass prior to deployment. Perform advanced AI vulnerability validation and triage; distinguish true vulnerabilities from model limitations and false positives within application context. Conduct manual adversarial testing (multi-turn prompt injection, jailbreak attempts, indirect injection) when automated tooling is insufficient. Develop AI Security playbooks and tiered training/certification to mature ASCs from finding review to adversarial testing capability. Map AI security findings to industry frameworks (OWASP Top 10 for LLMs, MITRE ATLAS) and ensure tracking/remediation through existing Jira/AVR workflows. • Develop ASC playbooks, training, and office hours for threat modeling and secure design. • Roll out CI/CD-integrated controls and AVR workflows. • Establish ASC KPIs and dashboards; report progress and compliance coverage. • Coordinate migration planning with application owners; track risks and dependencies. • Facilitate escalations and cross-functional alignment with SMEs and governance. • Promote security awareness and culture by educating teams on secure coding practices, potential threats, and encouraging open dialogue around security. • Act as the primary liaison between development teams and the security organization to ensure clear communication, timely resolution of security concerns, and alignment with security priorities. • Lead security enablement activities, including training sessions, workshops, and hands on exercises to enhance team security skills. • Support secure development practices by performing secure code reviews, participating in threat modeling sessions, and assisting teams with effective use of security testing tools and automated scans. • Contribute to organizational security standards by providing practical feedback and helping refine procedures to ensure they remain effective and adoptable across teams.

Requirements

5+ years of application security experience with developer enablement - Experience with SAST/DAST/ SCA
Hands on experience securing AI/LLM-enabled applications, including prompt injection and data leakage risk mitigation
Familiarity with RAG architectures, vector databases, and agentic frameworks- ability to advise on isolation/guardrail patterns
Deep experience with python to automate security testing and extend/customize adversarial testing probes
Experience working with developers on secure coding and threat modeling
Experience with automation and compliance enforcement in CI/CD
Application security
Owasp

Nice To Haves

Experience establishing champions programs or communities of practice.
Certifications: CSSLP, CRISC, or leadership-focused credentials.
Background in enterprise governance and metrics.

Responsibilities

Scale the Application Security Champions (ASC) Community of Practice (CoP)
Provide enablement, tooling, and standards to embed AppSec into decentralized teams.
Align ASC initiatives with tiered control adoption and quarterly roadmap.
Operationalize LLM adversarial testing (e.g., garak-based testing) and integrate into CI/CD as a standard control for AI-enabled applications.
Define and maintain AI "Golden Test Suites" that AI-enabled applications must pass prior to deployment.
Perform advanced AI vulnerability validation and triage; distinguish true vulnerabilities from model limitations and false positives within application context.
Conduct manual adversarial testing (multi-turn prompt injection, jailbreak attempts, indirect injection) when automated tooling is insufficient.
Develop AI Security playbooks and tiered training/certification to mature ASCs from finding review to adversarial testing capability.
Map AI security findings to industry frameworks (OWASP Top 10 for LLMs, MITRE ATLAS) and ensure tracking/remediation through existing Jira/AVR workflows.
Develop ASC playbooks, training, and office hours for threat modeling and secure design.
Roll out CI/CD-integrated controls and AVR workflows.
Establish ASC KPIs and dashboards; report progress and compliance coverage.
Coordinate migration planning with application owners; track risks and dependencies.
Facilitate escalations and cross-functional alignment with SMEs and governance.
Promote security awareness and culture by educating teams on secure coding practices, potential threats, and encouraging open dialogue around security.
Act as the primary liaison between development teams and the security organization to ensure clear communication, timely resolution of security concerns, and alignment with security priorities.
Lead security enablement activities, including training sessions, workshops, and hands on exercises to enhance team security skills.
Support secure development practices by performing secure code reviews, participating in threat modeling sessions, and assisting teams with effective use of security testing tools and automated scans.
Contribute to organizational security standards by providing practical feedback and helping refine procedures to ensure they remain effective and adoptable across teams.