Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Gartner

Lead AppSec Engineer

Gartner

. Support Gartner’s Application Security function .

Posted 11/12/2026full-timeUnited StatesSenior💰 $116,000 - $170,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Security Engineering, with a strong focus on DevSecOps, Cloud Security, and Application Security. Capable of implementing security tools and automation solutions while effectively communicating risk and collaborating with stakeholders.

Highest-signal resume keywords
Security Engineering ExperienceDevSecOps ExpertiseCloud Security KnowledgeVulnerability Scanning TechnologiesThreat Modeling Experience

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Vulnerability AssessmentThreat ModelingPenetration TestingScriptingInfrastructure as Code (IaC)Policy as Code (PaC)Cloud Security (AWS, Azure, GCP)Application SecurityAutomation SolutionsSecurity Controls Frameworks
Soft Skills
Critical ThinkingProblem-SolvingCommunicationCollaborationRelationship Building
Tools & Technologies
Vulnerability Scanning ToolsAST PlatformsSecurity TechnologiesCI/CD ToolsSecurity Scorecards
Industry Keywords
SOC2ISO 27001NIST 800-53Risk AssessmentSecurity Posture

Tech Stack

Tools & technologies
AWSAzureCloudGoogle Cloud PlatformJavaJavaScriptPerlPHPPythonRuby.NET

About the role

Key responsibilities & impact
  • Support Gartner’s Application Security function
  • Execute daily vulnerability assessment functions
  • Work with Information Security partners and technology stakeholders to identify risks and vulnerabilities
  • Collaborate with stakeholders on remediation and prioritize effort across business units
  • Partner to implement security tools, technologies, and controls
  • Provide education and training
  • Engineer automation solutions and security tool integrations for day-to-day AppSec responsibilities
  • Collaborate with business stakeholders to design secure applications
  • Test applications for security weaknesses and partner on remediation
  • Mentor engineers and security champions on threat modeling techniques
  • Triage and prioritize security risks, vulnerabilities, and exceptions
  • Coordinate orchestration, automation, and management of security technologies and platforms
  • Own lifecycle management, including identification, threat assessment, threat modeling, and risk avoidance
  • Create actionable reports showing impact to security posture
  • Define and implement metrics, KRIs, and security scorecards
  • Serve as Application Security subject-matter expert and first point of contact for critical issues, security risk assessments, and CI/CD issue triage
  • Evaluate requirements and implement tools, processes, and technologies to improve security posture
  • Use data to drive prioritization, highlight systemic issues, and influence roadmap decisions

Requirements

What you’ll need
  • 7+ years of experience in a Security Engineering role
  • Proven experience in DevSecOps, Cloud Security, and Application Security
  • Strong independent critical thinking and problem-solving skills
  • Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling
  • Formal experience with threat modeling
  • Experience leading projects, initiatives, and resources through direct and indirect leadership
  • Deep knowledge of assessing and prioritization of risk
  • Cloud experience with AWS, Azure, or GCP
  • Infrastructure as Code (IaC) and Policy as Code (PaC) concepts
  • Familiarity with technical security controls, guidelines, and frameworks such as SOC2, ISO 27001/27013, and NIST 800-53
  • Ability to automate tasks and code solutions to repetitive problems
  • Scripting or programming experience with Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, or Bash
  • Experience with penetration testing and web application assessment
  • Proven communication, collaboration, and critical thinking skills
  • Ability to build trusting relationships with peers, stakeholders, partners, and suppliers
  • Ability to define and communicate risk in business-relevant language to technical and non-technical audiences
  • Ability to apply expert knowledge to solve complex business and technical issues strategically
  • Desire for lifelong learning and continuous personal/professional development

Benefits

Comp & perks
  • Competitive compensation
  • Limitless growth and learning opportunities
  • Ongoing mentorship and apprenticeship
  • Leadership courses, development programs, technical courses, certification opportunities and more
  • Collaborative and positive culture
  • Flexibility of working from home and collaborating with peers in dynamic offices
  • 20+ PTO days plus holidays and floating holidays in your first year
  • Extensive medical, dental insurance and vision plan
  • 401K with corporate match, immediate vesting
  • Health-and-wellness-related allowance programs
  • Parental leave
  • Tuition reimbursement
  • Employee Stock Purchase Plan
  • Employee Assistance Program
  • Gartner Gives Charity Match
  • 401k match up to $7,200 per year
  • Opportunity to purchase company stock at a discount
  • Annual bonus plan based on company and individual performance, or role-based, uncapped sales incentive plan