Skip to main content

Application Security Specialist

Posted 5 days ago

rpl internationalArlington (VA)

SENIORITY

Lead

Apply (opens in a new tab)

About the role

Remote | Contract | No C2C | Fortune 500 ClientThe position will support Application Security team by documenting application securityprocesses, conducting gap analyses, defining KPIs, and helping implement security toolsacross the organization. This person will work between engineering, architecture, security, and business stakeholders to translate technical requirements into business requirementsand process documentation. The individual will help evaluate security products, support proof-of-concept (POC)initiatives, and facilitate conversations with engineering teams to ensure applicationsecurity tools and processes are implemented consistently across different brands.
Key Responsibilities:
  • Document existing application security processes, workflows, and the softwaredevelopment lifecycle (SDLC).
  • Conduct gap analyses to identify process, security, and implementation gaps.
  • Define and track KPIs and metrics for application security operations.
  • Work with engineers and architects to develop process flows and implementationdocumentation.
  • Translate technical requirements into clear business requirements and actionabledocumentation.
  • Facilitate discussions between security teams, engineers, architects, and businessstakeholders.
  • Support product selection, tool evaluations, and proof-of-concept (POC) initiatives.
  • Coordinate the implementation of application security tools across brands andbusiness units.
  • Help ensure application security practices are integrated throughout the SDLC.
  • Support Agile processes and collaborate with technical teams on implementationplanning. Technical Environment Candidates should have familiarity with application security processes and tools, including:
  • Source code repositories: GitHub, GitLab
  • Application security scanning: Snyk
  • Security frameworks: NIST
  • Security technologies: Akamai, secrets management, and certificate management
  • SDLC: Integrating security into software development and deployment lifecycles The role is focused on security process ownership, product implementation, and crossfunctional coordination, rather than hands-on software engineering alone.
Ideal Candidate Profile: The strongest candidate will have
  • 3+ years of experience in business analysis, product ownership, technical programdelivery, or a similar role within cybersecurity or application security.
  • Experience documenting workflows, process flows, requirements, andimplementation procedures.
  • A solid understanding of application security and the SDLC.
  • Experience working directly with software engineers and technical architects.
  • The ability to translate complex technical concepts into business-friendlydocumentation.
  • Experience conducting gap analyses, defining KPIs, and improving processes.
  • Exposure to security tools, vendor evaluations, product selection, or POCs.
  • Familiarity with Agile methodologies and cross-functional project delivery.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this