Gartner
Gartner
Gartner este o companie globală de cercetare și consultanță care îi ajută pe liderii organizațiilor să ia decizii informate cu privire la prioritățile esențiale pentru misiunea lor. Activitatea sa combină analiza de specialitate, consultanța, îndrumarea directorilor, cercetarea și serviciile digitale de piață în domenii precum tehnologia, finanțele, resursele umane, aspectele juridice, marketingul, vânzările și strategia de produs. Gartner organizează, de asemenea, peste 40 de conferințe și oferă organizațiilor recomandări pentru îmbunătățirea investițiilor în tehnologie. Echipele lucrează într-un model hibrid conceput pentru a sprijini colaborarea într-o forță de muncă internațională și diversă, cu oportunități de carieră în servicii pentru clienți, consultanță, cercetare, servicii de consiliere, tehnologie și funcții corporative.

Lead Application Security Engineer - Gartner (Hybrid)

Lead application security engineering at Gartner across applications and cloud environments. Drive vulnerability management, threat modeling, automation, and security controls across business units.

Descriere

  • Support Gartner’s application security program
  • Conduct daily vulnerability assessments
  • Work with Information Security and technology stakeholders to identify risks and vulnerabilities
  • Coordinate remediation and prioritize security efforts across business units
  • Help deploy security tools, technologies, and controls
  • Deliver security education and training
  • Develop automation solutions and integrate security tools
  • Work with business stakeholders to design secure applications
  • Assess applications for security weaknesses and support remediation
  • Mentor engineers and security champions in threat modeling
  • Triage and prioritize security risks, vulnerabilities, and exceptions
  • Coordinate the orchestration, automation, and administration of security platforms
  • Manage the vulnerability lifecycle from identification and threat assessment through modeling and risk avoidance
  • Produce actionable reports on the organization’s security posture
  • Establish metrics, key risk indicators, and security scorecards
  • Act as the application security subject-matter expert and primary contact for critical issues, risk assessments, and CI/CD concerns
  • Assess requirements and implement improvements to security tools, processes, and technologies
  • Use data to set priorities, identify systemic issues, and guide roadmap decisions

Cerințe

  • 6–8 years of experience in security engineering
  • Demonstrated expertise in DevSecOps, cloud security, and application security
  • Strong independent judgment, critical thinking, and problem-solving ability
  • Experience with vulnerability scanners, application security testing platforms, and cloud security tools
  • Professional experience conducting threat modeling
  • Experience leading projects, initiatives, and resources through direct and indirect leadership
  • Advanced understanding of risk assessment and prioritization
  • Cloud security experience with AWS, Azure, or GCP
  • Understanding of Infrastructure as Code and Policy as Code principles
  • Familiarity with security controls, guidance, and frameworks including SOC 2, ISO 27001/27013, and NIST 800-53
  • Ability to automate workflows and develop code-based solutions
  • Scripting or programming experience in Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, or Bash
  • Experience with penetration testing and web application security assessments
  • Strong communication, collaboration, and analytical skills
  • Ability to establish effective relationships with colleagues, stakeholders, partners, and suppliers
  • Ability to explain risk in business-relevant terms to technical and non-technical audiences
  • Ability to apply expert knowledge to complex technical and business challenges
  • Commitment to continuous learning and professional development

Beneficii

  • Competitive compensation package
  • Broad opportunities for growth and learning
  • Ongoing mentorship and apprenticeship support
  • Leadership, development, technical training, and certification opportunities
  • Collaborative and supportive workplace culture
  • Flexible work-from-home options alongside collaboration in dynamic offices
  • More than 20 paid time-off days, holidays, and floating holidays during the first year
  • Comprehensive medical, dental, and vision coverage
  • 401(k) plan with company matching and immediate vesting
  • Health and wellness allowance programs
  • Parental leave
  • Tuition reimbursement
  • Employee Stock Purchase Plan
  • Employee Assistance Program
  • Gartner Gives charity matching
  • 401(k) matching of up to $7,200 annually
  • Ability to purchase company stock at a discount

Locuri de muncă similare

Meazure Learning

Senior Customer Success Manager, India (Remote)

Meazure Learning
1.001 – 5.000 Angajați
ConsultanțăEducațieLogistică

Lead and develop Meazure Learning’s India-based Customer Success Associates, overseeing team performance, client support, staffing, and service delivery. This remote role combines people management with cross-functional collaboration and continuous improvement.

Deschide
Abbott

Remote Clinical Inquiry Specialist, Genetic Counselor

Abbott

Responds to clinical inquiries about Abbott precision oncology diagnostics and supports testing, result interpretation, education, and genetic counseling operations. The role also contributes to marketing, special projects, and professional education.

Deschide