Engineering-L2-Warsaw-Vice President-Secure SDLC Lead

Requirements

• 7+ years of experience in Application Security, Secure SDLC, DevSecOps or Product Security.
• Strong understanding of Secure SDLC principles and software development practices.
• Hands-on experience with Application Security and security testing methodologies.
• Experience with SAST, DAST and application security tooling.
• Experience integrating security controls into CI/CD pipelines and modern engineering workflows.
• Strong understanding of threat modelling, vulnerability management and application risk assessment.
• Excellent communication and stakeholder management skills.

Nice to Haves

• Experience leading or driving Secure SDLC initiatives in large-scale engineering environments.
• Knowledge of industry frameworks and standards such as OWASP Top 10, CWE and NIST.
• Familiarity with AI-enabled security tooling and AI security concepts.
• Experience with cloud-native application security and modern software architectures.
• Background in Financial Services, FinTech or another highly regulated industry.
• Relevant security certifications such as CISSP, CSSLP, GIAC or cloud security certifications.

What You'll Be Doing

• Lead and evolve the firm's Secure Software Development Lifecycle (Secure SDLC) strategy across global engineering teams.
• Drive adoption of application security controls throughout the software development lifecycle, including static and dynamic security testing.
• Partner with engineering teams to embed security-by-design principles into SDLC and CI/CD processes.
• Lead application security reviews, threat modelling activities, and security testing programmes.
• Oversee and enhance security testing capabilities, including SAST, DAST and emerging AI-enabled security testing solutions.
• Assess application security risks and help engineering teams prioritize remediation efforts.
• Collaborate with engineering, product and technology stakeholders to improve security controls and developer security practices.
• Evaluate emerging technologies and AI-driven security capabilities to strengthen Secure SDLC services.
• Mentor and support security engineers while promoting a strong application security culture across the firm.

Perks and Benefits

• Learn more about our culture, benefits, and people at GS.com/careers.
• Committed to finding reasonable accommodations for candidates with special needs or disabilities during the recruiting process.