Principal Application Security Specialist

Develop and own the application security testing methodology and standards across web, API, mobile, and AI/LLM domains. Lead complex, novel security assessments and establish the organization-wide triage, escalation, and evidence-quality framework for L1–L3 teams. Drive the integration of automated security controls into CI/CD pipelines, championing a shift-left approach with proactive, risk-based remediation verification and release closure. Serve as the final technical escalation point for application security, manage false positives, and define root-cause analysis standards for systemic defects. Mentor specialists, create training materials, and lead sessions on risks and mitigations for engineering teams. Partner with product and architecture leadership to influence secure design at scale and prioritize security investments.