{"id":1420281,"url":"https://alion.io/job/east-west-bank-lead-application-security-devsecops-ai-driven-software-assurance","title":"Lead Application Security - DevSecOps & AI-Driven Software Assurance","company":{"id":1850797,"name":"East West Bank","domain":"eastwestbank.com","url":"https://alion.io/company/eastwestbank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CodeQL","optional":false},{"name":"Dependabot","optional":false},{"name":"GitHub","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-28T22:12:04Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-19T07:40:10Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"Introduction\nSince 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.\nHeadquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.\nOverview\nThe Senior Cyber Security Engineer will lead and execute security initiatives across the application lifecycle, integrating security into DevOps pipelines, managing vulnerability assessments, and coordinating penetration testing efforts. This role also extends into advanced software assurance, including third-party software analysis, binary-level inspection, and application trust validation, ensuring that both internally developed and externally sourced applications meet the bank’s security standards prior to execution within the enterprise environment.\nResponsibilities\nApplication Security & DevSecOps Integration\nEmbed security controls into CI/CD pipelines using GitHub workflows and automation tools.\n\nCollaborate with development teams to implement secure coding practices and threat modeling during design and development phases.\n\nManage GitHub Advanced Security configurations, including secret scanning, push protection, and impact analysis.\n\nSecurity Testing & Vulnerability Management\nConduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using approved tools (e.g., CodeQL, Dependabot,, OWASP ZAP).\n\nPerform manual and automated code reviews to identify vulnerabilities and ensure remediation through code fixes or configuration changes.\n\nMaintain accurate mapping of applications to GitHub repositories to support vulnerability tracking and reporting.\n\nAdvanced Software Analysis & Trust Establishment\nPerform security analysis of third-party software, including both source code review and compiled binary analysis where source is not available.\n\nConduct binary decomposition and reverse engineering techniques, as appropriate, to evaluate software behavior and identify embedded risks.\n\nSupport the establishment and execution of a software trust and reputation framework, enabling secure decision-making for application onboarding and whitelisting within the enterprise environment.\n\nAnalyze open-source and GitHub-hosted code, including dependencies and contribution risk.\n\nPartner with AppSec leadership to support application security activities and formalize secure software approval processes.\n\nAPI & Web Application Security\nConduct API security assessments and integrate monitoring tools to protect application endpoints.\n\nSupport WAF policy management and application-layer threat monitoring.\n\nThreat Intelligence Integration\n\nIntegrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software.\n\nReassess software trust posture when threat conditions change, ensuring continuous validation of approved applications.\n\nPenetration Testing & Third-Party Risk\nIntegrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software.\n\nReassess software trust posture when threat conditions change, ensuring continuous validation of approved applications.\n\nQualifications\nProven experience in application security, DevSecOps, or software security analysis.\n\nStrong hands-on expertise in:\n\nSAST/DAST tools and secure SDLC practices\n\nGitHub and open-source ecosystems\n\nGitHub Advanced Security\n\nExperience with third-party software risk analysis, software composition analysis (SCA), or reverse engineering / binary analysis\n\nFamiliarity with software supply chain security and trust validation frameworks\n\nExperience integrating threat intelligence into security decision-making\n\nStrong understanding of secure SDLC, threat modeling (e.g., STRIDE), and vulnerability management.\n\nExperience coordinating penetration tests and working with third-party vendors.\n\nStrong communication and stakeholder engagement skills.\n\nApplicants must have legal authorization to work in the United States. We do not offer visa sponsorship at this time.\nCompensation\nThe base pay range for this position is USD $120,000.00/Yr. - USD $180,000.00/Yr. Exact offers will be determined based on job-related knowledge, skills, experience, and location.","description_format":"text","description_chars":4976,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","Business & SME Lending","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-09-28T22:12:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 38 · green card filings: 5","filings_12m":38,"filings_prev_12m":38,"green_card_filings_12m":5,"median_offered_wage_usd":147267,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.608,"p_room":0.35,"age_days":20,"expected_fill_days":8,"reasons":["conf:1","urgency","velocity","win:tail"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":false},"html_url":"https://alion.io/job/east-west-bank-lead-application-security-devsecops-ai-driven-software-assurance","json_url":"https://alion.io/job/east-west-bank-lead-application-security-devsecops-ai-driven-software-assurance.json","meta":{"generated_at":"2026-10-19T11:16:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7983,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1850797},"rest":"https://alion.io/mcp/rest/get_company?id=1850797"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feast-west-bank-lead-application-security-devsecops-ai-driven-software-assurance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feast-west-bank-lead-application-security-devsecops-ai-driven-software-assurance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feast-west-bank-lead-application-security-devsecops-ai-driven-software-assurance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/east-west-bank-lead-application-security-devsecops-ai-driven-software-assurance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feast-west-bank-lead-application-security-devsecops-ai-driven-software-assurance"}]}