Vice President, Application Platform Operations Lead

The Custom Group of Companies

Iselin, NJ

JOB DETAILS
SKILLS
Amazon Web Services (AWS), Ansible, Applications Security, Bash Scripting, Benchmarking, Best Practices, Cloud Computing, Communication Skills, Computer Security, Configuration Management, Continuous Deployment/Delivery, Continuous Integration, Cross-Functional, DevOps, Establish Priorities, External Audit, GCP (Good Clinical Practices), GitHub, ISO (International Organization for Standardization), Internal Audit, Jenkins, Leadership, Machine Tool, Maintain Compliance, Mentoring, Microsoft Windows Azure, Python Programming/Scripting Language, Regulations, Regulatory Compliance, Risk Management, Root Cause Analysis, Scripting (Scripting Languages), Secure Coding, Security Architecture, Security Compliance, Security Infrastructure, Software Development Lifecycle (SDLC), Test Automation, Time Management, Trend Analysis, U.S. National Institute of Standards and Technology (NIST), Vulnerability Scanners
LOCATION
Iselin, NJ
POSTED
30+ days ago

Key Responsibilities:
  • Establish and manage a comprehensive vulnerability management program, including:
    • Integration of scanning tools across source code, dependencies, containers, and infrastructure.
    • Continuous discovery, prioritization, and tracking of vulnerabilities.
    • Coordinating with development and infrastructure teams for timely remediation.
    • Root cause analysis and reporting on trends and recurring issues.
    • Lead the design and implementation of secure, automated CI/CD pipelines.
  • Define and drive DevSecOps strategy in alignment with business goals and compliance standards.
  • Embed security controls and tooling (SAST, DAST, SCA, IaC scanning, etc.) into the software development lifecycle.
  • Collaborate closely with engineering, platform, and security teams to ensure scalable security architecture.
  • Automate security testing and compliance checks within CI/CD workflows.
  • Evaluate and implement security tools and platforms that support proactive risk management.
  • Drive secure configuration management and enforcement through IaC and policy-as-code.
  • Maintain awareness of emerging threats, vulnerabilities, and regulatory changes.
  • Support internal and external audits, ensuring alignment with compliance frameworks (e.G., ISO 27001, SOC 2, GDPR).
  • Provide technical mentoring and guidance on secure coding, cloud security, and DevSecOps best practices.



Required Skills & Experience:
  • 5+ years of hands-on experience in DevOps, Security Engineering, or DevSecOps.
  • Strong experience designing and managing vulnerability management workflows, ideally across multi-cloud and containerized environments.
  • Familiarity with vulnerability scanning tools and platforms (e.G., Snyk, Tenable, Qualys, Trivy, Clair, etc.).
  • Proficient in implementing CI/CD pipelines with tools such as GitLab CI, GitHub Actions, Jenkins, CircleCI.
  • Deep understanding of cloud platforms (AWS, Azure, or GCP) and cloud-native security controls.
  • Expertise in scripting (e.G., Python, Bash) and infrastructure-as-code (Terraform, Ansible).
  • In-depth knowledge of application and infrastructure security, secure SDLC, and DevSecOps tooling.
  • Strong knowledge of compliance and security frameworks: OWASP, NIST, CIS Benchmarks, ISO 27001.
  • Excellent communication skills and ability to work across technical and non-technical stakeholders.
  • Proven ability to lead cross-functional security initiatives and mentor engineers.

About the Company

T

The Custom Group of Companies