Job Title: Application Security Lead Location: Quincy, MA (Hybrid)
Type: Long-Term Contract
Job Summary
We are seeking an experienced Application Security Lead to drive security governance, vulnerability management, compliance initiatives, and application security best practices across enterprise environments. This role will partner with development, infrastructure, and security teams to strengthen security controls, manage risk, and support regulatory compliance requirements. Responsibilities
Lead application security and vulnerability management initiatives.
Manage SAST, DAST, penetration testing, and remediation programs.
Support security compliance efforts including NIST, FedRAMP, HIPAA, HITRUST, GDPR, and related frameworks.
Partner with internal teams and auditors to address security findings and compliance requirements.
Provide security architecture guidance and best-practice recommendations.
Develop security processes, reporting, documentation, and training programs.
Support incident response, risk assessments, and continuous security improvements.
Requirements
10+ years of IT experience with 5+ years in Application Security, Information Security, or Security Governance roles.
Strong experience with vulnerability management, security assessments, and compliance programs.
Knowledge of NIST, FedRAMP, HIPAA, HITRUST, GDPR, and related security frameworks.
Experience with SAST, DAST, penetration testing, and security remediation.
Ability to communicate security risks and recommendations to technical and business stakeholders.
Preferred
AWS security and cloud compliance experience.
CISSP, CISM, CISA, CCSP, or similar certifications.
Experience supporting large enterprise or public-sector environments.
Equal Opportunity Employer: We are committed to fostering a diverse and inclusive workplace and encourage qualified candidates from all backgrounds to apply.