{"id":4269416,"url":"https://alion.io/job/prudential-lead-application-security","title":"Lead, Application Security","company":{"id":5562,"name":"Prudential","domain":"prudential.com","url":"https://alion.io/company/prudential","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Newark, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":123700,"max":204100,"currency":"USD","period":"year","gross":null,"usd_annual":204100},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"EPSS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-12T00:00:00Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-11-13T17:20:00Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"Job Classification:\nTechnology - Information SecurityAre you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA. When you join Prudential, you’ll unlock an exciting and impactful career-while growing your skills and advancing your profession at one of the world’s leading financial services institutions.\nYour Team & Role\nAs a Lead, Application Security on the Attack Surface Management team, you will play a critical technical and strategic leadership role in advancing Prudential’s enterprise application security program. You will partner closely with senior security leaders, the Information Security Office, the Chief Technology Office, and global engineering teams to drive secure-by-design outcomes and measurable risk reduction across Prudential’s digital ecosystem.\nIn this role, you will be accountable for shaping, governing, and maturing application security capabilities for modern, cloud-native, and DevOps-driven environments. You will lead complex initiatives that secure applications at scale, influence future architecture and engineering practices, and embed security controls into CI/CD pipelines through automation and self-service enablement.\nYou will operate as a senior escalation point, trusted advisor, and technical authority, working on highly complex and ambiguous problems where judgment, experience, and influence are required. Your work will have a direct impact on Prudential’s products, platforms, and customer trust.\nThe ideal candidate brings deep expertise in modern application architecture, cloud security, and DevSecOps, along with a forward-looking mindset focused on scaling security through automation, policy-as-code, and engineering-first solutions.\nHere is What You Can Expect on a Typical Day\nServe as the technical lead and escalation point for complex operational and project work across the Application Security and Attack Surface Management domains.\nProvide expert-level technical leadership for application security tools, platforms, and assessment methodologies.\nLead the design, evolution, and execution of application security assessment, response, and risk governance processes.\nLeverage deep AppSec and DevSecOps expertise to solve complex technical, process, and organizational challenges impacting risk reduction.\nAct as a bridge between AppSec, DevOps, Cloud, and business teams, ensuring security requirements are understood, actionable, and aligned to delivery objectives.\nPartner with senior leadership to define the future-state vision for Prudential’s application security program, informed by hands-on operational insight.\nLead the maturation of vulnerability and configuration monitoring across first-party, third-party, and open-source software.\nDrive the integration of security controls into CI/CD pipelines, enabling automated enforcement, monitoring, and reporting.\nDesign and evolve security policies, standards, and alerting mechanisms aligned to SOX, NIST, PCI DSS, and other regulatory frameworks.\nEvaluate and vet new security technologies, providing strategic recommendations and technical due diligence.\nApply qualitative and quantitative analysis to improve developer experience, security outcomes, and adoption of secure-by-design practices.\nChampion secure-by-design principles across the SDLC through guidance, standards, tooling, and hands-on engagement.\nValidate and document compensating controls and mitigations to manage risk until remediation is complete.\nEnsure risk and performance metrics accurately represent application security posture for executive and regulatory audiences.\nAuthor and maintain technical documentation, standards, and SOPs that continuously improve program maturity.\nDevelop proof-of-concept exploits in lab environments to demonstrate exploitability and validate remediation effectiveness.\nProvide mentorship and technical guidance to junior team members, raising overall team capability and consistency.\nDefine requirements for workflow orchestration and automation to manage application security posture at enterprise scale.\nThe Skills & Expertise You Bring\nBachelor of Computer Science/Engineering or formal experience in related fields \nDeep familiarity with vulnerability and security frameworks and data sources (CVE, CVSS, EPSS, CWE)\nProven experience leading and maturing application security and vulnerability management programs\nStrong ability to partner with engineering teams to validate findings, reduce false positives, and drive effective remediation\nEngineering mindset with strong systems thinking and problem-solving skills\nExcellent written and verbal communication, with the ability to articulate technical and business risk to varied audiences\nExperience working in agile and DevSecOps environments\nHands-on experience with industry frameworks (OWASP Top 10, OWASP WSTG, PTES, MITRE ATT&CK)\nDeep experience with SAST, SCA, DAST, and ASPM tooling\nStrong understanding of software composition analysis (SCA), SBOMs, and supply chain risk\nPreferred qualifications:\nScripting and automation experience (Python, PowerShell, Bash)\nExperience performing exploit validation and web application penetration testing\nStrong understanding of threat actors and real-world attack techniques\nKnowledge of security standards and frameworks (NIST, CIS, PCI DSS)\nExperience applying Agentic AI or AI-assisted approaches to security use cases\nAdvanced security certifications (e.g., OSCP, GPEN, GWAPT, CASP+, GCSA, GCFA, GCIH)\nCloud certifications (AWS, Azure, GCP)\nDemonstrated ability to influence without authority and lead through expertise\nYou’ll Love Working Here Because You Can\nJoin a team and culture where your voice matters; where every day, your work transforms our experiences to make lives better. As you put your skills to use, we’ll help you make an even bigger impact with learning experiences that can grow your technical AND leadership capabilities. You’ll be surprised by what this rock-solid organization has in store for you.\nWhat we offer you:\nPrudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $123,700.00 to $204,100.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.\nMarket competitive base salaries, with a yearly bonus potential at every level.\n Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.\n401(k) plan with company match (up to 4%). \nCompany-funded pension plan. \nWellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs. \nWork/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development. \nEducation Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs. \n Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).\nEligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers. Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.\nPrudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.\nPrudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.\nTo maintain the integrity and security of our hiring process, Prudential may use identity verification technologies. Your consent will be obtained before any verification takes place.\nIf you need an accommodation to complete the application process, please email .\nIf you are experiencing a technical issue with your application or an assessment, please email  to request assistance.","description_format":"text","description_chars":8826,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Wealth Management & Financial Advisors","Asset Management & Funds","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-11-13T17:20:00Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.713,"p_room":0.55,"age_days":32,"expected_fill_days":29,"reasons":["conf:1","win:tail","comp:brand"],"computed_at":"2026-11-13T18:57:00Z"},"pay":{"stated_usd_annual":204100,"is_top_pay":true},"html_url":"https://alion.io/job/prudential-lead-application-security","json_url":"https://alion.io/job/prudential-lead-application-security.json","meta":{"generated_at":"2026-11-13T18:57:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37848,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5562},"rest":"https://alion.io/mcp/rest/get_company?id=5562"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprudential-lead-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprudential-lead-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprudential-lead-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/prudential-lead-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprudential-lead-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4269416}},{"tool":"search_jobs","arguments":{"company":"prudential.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4269416},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}