{"id":166421,"url":"https://alion.io/job/western-union-director-application-security","title":"Director Application Security","company":{"id":58895,"name":"Western Union","domain":"westernunion.com","url":"https://alion.io/company/western-union","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":19,"ghost_share":0,"stale_share":0,"repost_share":0.105,"time_to_fill_p50_days":13,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Machine Learning","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-24T00:00:00Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-17T04:59:42Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":54},"description":"We are seeking an experienced and visionary Director Application Security to lead the strategy, development, and execution of our Application Security program. Reporting to the Vice President of Security Operations, this leader will be responsible for maturing and optimizing application security capabilities across the software development lifecycle, ensuring secure-by-design principles are embedded into engineering practices while enabling rapid delivery of innovative products.\nThis individual will partner closely with Engineering, Product Management, Architecture, DevOps, Cloud Engineering, and Security Operations to integrate security into every phase of software development. The successful candidate will have extensive experience building or transforming Application Security programs within complex technology organizations and will possess the ability to influence engineering culture through collaboration rather than gatekeeping.\nRole Responsibilities:\nApplication Security Strategy\nDevelop and execute the enterprise Application Security strategy aligned with business and technology objectives.\n\nBuild and mature a scalable Application Security program supporting modern software development practices.\n\nDefine the long-term roadmap for secure software development across cloud, web, mobile, APIs, and emerging technologies.\n\nEstablish secure-by-design principles and integrate them throughout the Software Development Life Cycle (SDLC).\n\nSecure Development Lifecycle (SSDLC)\nLead the implementation and continuous improvement of a Secure Software Development Lifecycle (SSDLC).\n\nDevelop standards and security requirements for application development.\n\nPartner with engineering teams to integrate security early within CI/CD pipelines.\n\nPromote developer-friendly security practices that minimize friction while improving software security.\n\nSecurity Testing & Assurance\nOversee enterprise application security testing, including:\nStatic Application Security Testing (SAST)\n\nDynamic Application Security Testing (DAST)\n\nSoftware Composition Analysis (SCA)\n\nInteractive Application Security Testing (IAST)\n\nAPI Security Testing\n\nContainer Security\n\nInfrastructure-as-Code (IaC) Security\n\nSecure code reviews\n\nPenetration testing coordination\n\nDevSecOps Enablement\nPartner with DevOps teams to embed automated security controls into CI/CD pipelines.\n\nImprove automation of security testing and vulnerability management.\n\nReduce developer burden through integrated tooling and streamlined workflows.\n\nMeasure security effectiveness while enabling engineering velocity.\n\nOperationalize Continuous Threat & Exposure Management (CTEM) across critical applications and business services\nDefine CTEM scope around critical business services, crown-jewel applications, sensitive data, material APIs, and externally exposed assets.\nConsolidate exposure signals from application testing, attack-surface management, cloud security, vulnerability management, penetration testing, bug bounty, and threat intelligence.\nEstablish a common exposure taxonomy and risk model that incorporates exploitability, reachability, business criticality, threat activity, and compensating controls.\nMaintain an evidence-backed view of application exposure rather than relying primarily on scanner severity.\nCloud & Modern Architecture Security\nProvide application security guidance for:\nCloud-native applications\n\nMicroservices\n\nAPIs\n\nContainers\n\nKubernetes\n\nServerless architectures\n\nArtificial Intelligence and Machine Learning applications\n\nThird-party integrations\n\nEngineering Partnership\nBuild trusted relationships with engineering leadership.\n\nChampion security as an engineering quality function.\n\nDevelop security champions programs across engineering organizations.\n\nLeadership\nLead, mentor, and develop a high-performing Application Security team.\n\nEstablish performance metrics and operational objectives.\n\nManage vendor relationships and application security technologies.\n\nSupport hiring and organizational growth as the program matures.\n\nMentor developers on secure coding practices and emerging threats.\n\nRole Requirements:\nBachelor's degree in Computer Science, Cybersecurity, Engineering, or related field required.\n\nAdvanced degree preferred.\n\n10+ years of progressive experience in Application Security, Software Security, Product Security, Secure Engineering, or related cybersecurity disciplines.\n\n5+ years leading Application Security teams.\n\nDemonstrated success building, transforming, or significantly maturing Application Security programs within enterprise organizations.\n\nExperience partnering closely with software engineering organizations in Agile and DevSecOps environments.\n\nStrong understanding of:\nSecure Software Development Lifecycle (SSDLC)\n\nOWASP Top 10\n\nSecure coding principles\n\nThreat modeling\n\nModern authentication protocols\n\nAPI security\n\nCloud-native application security\n\nContainer security\n\nCI/CD security\n\nDevSecOps\n\nSoftware supply chain security\n\nAI-assisted software development (\"vibe coding\") governance and secure use\n\nApplication vulnerability management\n\nPossesses at least one of the following certifications (o4 comparable alternative):\nCISSP\n\nCSSLP\n\nGIAC Secure Software Programmer (GSSP)\n\nGIAC Cloud Security Automation (GCSA)\n\nWhat Success Looks Like:\nWithin the first 12-18 months, this leader will\nComplete a comprehensive assessment of the organization's Application Security maturity.\n\nDevelop and execute a multi-year Application Security transformation roadmap.\n\nFully integrate security into CI/CD pipelines across major engineering organizations.\n\nImplement meaningful risk-based application security metrics and executive dashboards.\n\nReduce application vulnerability remediation times while improving engineering satisfaction.\n\nStandardize threat modeling, secure code review, and security testing practices.\n\nDevelop measurable improvements in software security posture without negatively impacting developer productivity.\n\nWork Shift - HYBRID\nBenefits\nYou will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few. Please see the benefits below specific to your country. If applicable, additional role-specific benefits will be mentioned during your interview process or in an offer of employment.\nYour United States specific benefits include:\nParental Leave\n\nFamily First Programs\n\nMedical, Dental, and Life Insurance\n\nTuition Repayment Assistance Program\n\nFor residents of Colorado, California, Connecticut, Delaware, Minnesota, and Pennsylvania: Please do not respond to any questions on this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.\nSalary\nThe base salary range is $200,000 - $215,000 USD per year, total on target compensation includes a base salary plus a variable target incentive that aligns with individual and company performance.\nOther Details\nAs part of the application process, all applicants are required to take assessments. Western Union has partnered with a 3rd party provider to administer these tests. Applicants will need to provide their name and email address in order to process the assessments. If you have any questions, you may reach out to .\nWe are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.\n#LI-AM3\nEstimated Job Posting End Date:\n10-19-2026This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.","description_format":"text","description_chars":8400,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Pennsylvania","iso":null,"kind":"city"},{"name":"Connecticut","iso":null,"kind":"city"},{"name":"Delaware","iso":null,"kind":"city"},{"name":"Minnesota","iso":null,"kind":"city"},{"name":"Colorado","iso":null,"kind":"city"},{"name":"California","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-08-24T00:00:00Z"},{"event":"close","at":"2026-09-09T11:52:33Z"},{"event":"reopen","at":"2026-10-02T17:58:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 95 · green card filings: 29","filings_12m":95,"filings_prev_12m":64,"green_card_filings_12m":29,"median_offered_wage_usd":145161,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":9}],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.512,"p_room":0.35,"age_days":54,"expected_fill_days":13,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":false},"html_url":"https://alion.io/job/western-union-director-application-security","json_url":"https://alion.io/job/western-union-director-application-security.json","meta":{"generated_at":"2026-10-17T21:21:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5969,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58895},"rest":"https://alion.io/mcp/rest/get_company?id=58895"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwestern-union-director-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwestern-union-director-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwestern-union-director-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/western-union-director-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwestern-union-director-application-security"}]}