Director of Application Security Engineering

5w1 month ago

Caesars Entertainment

Las Vegas, US · Full-time · $180,000 – $230,000

About this role

Caesars Entertainment is seeking a dynamic and experienced Director of Application Security Engineering to lead our efforts in building and maintaining a robust and scalable application security program. This role will be pivotal in driving a 'shift left' security culture, focusing on integrating security seamlessly into our software development lifecycle.

You will define and execute our application security strategy, ensuring the security of our applications from development to production. Day-to-day, you will drive the implementation and optimization of automated security testing tools and processes, including SAST, DAST, SCA, and IAST, and integrate security testing seamlessly into CI/CD pipelines.

As a hands-on technical leader, you will lead, mentor, and grow a small team of application security engineers, fostering a culture of innovation and collaboration. You will also evaluate and manage relationships with security tool vendors, ensuring optimal performance and cost-effectiveness.

This role offers the opportunity to champion a proactive security philosophy and continuously improve application security processes, tools, and workflows. You will stay current with emerging security threats and industry best practices, making a significant impact on Caesars' overall security posture.

Requirements

Deep expertise in automated code scanning and remediation, SAST, DAST, SCA, and CI/CD pipeline integration.
Proven track record of building and leading high-performing security engineering teams.
Experience developing and implementing scripts and workflows to streamline operations and reduce manual effort.
Ability to effectively communicate complex technical issues to both technical teams and non-technical stakeholders.
Strong collaboration skills to partner with development, DevOps, infrastructure, and other cybersecurity teams.
Experience evaluating, selecting, and implementing new application security technology solutions.
Ability to mentor and guide junior application security engineers, providing technical expertise and fostering professional development.

Responsibilities

Develop and implement a comprehensive application security strategy aligned with business objectives, focusing on automation and proactive security measures.
Lead, mentor, and grow a small team of application security engineers, fostering a culture of innovation, collaboration, and continuous improvement.
Champion the 'shift left' security philosophy, embedding security considerations early in the SDLC.
Drive the implementation and optimization of automated security testing tools and processes, including SAST, DAST, SCA, and IAST.
Integrate security testing seamlessly into CI/CD pipelines, enabling continuous security monitoring and remediation.
Evaluate and manage relationships with security tool vendors, ensuring optimal performance and cost-effectiveness.
Collaborate with cross-functional teams to continuously improve application security processes, tools, and workflows.
Prepare and deliver reports, dashboards, and presentations to leadership and other departments.

Benefits

Opportunity to lead a high-impact security program at a major entertainment company.
Work in a dynamic, hands-on technical leadership role with a focus on innovation.
Collaborate with cross-functional teams including development, DevOps, and infrastructure.
Access to cutting-edge security tools and technologies.
Professional development and mentorship opportunities within a growing team.