Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 days ago

Director Application Security

Western Union61 open roles

Pay
$200,000 – $215,000 a year
Where
USA TX - Austin - 11902 Burnet Rd
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector Application SecurityWestern Union · USA TX - Austin - 11902 Burnet Rd

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Western Union's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Western Union postings stay open a median of 17 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 5 days ago

Western Union median: 17 days open

The posting

We are seeking an experienced and visionary Director Application Security to lead the strategy, development, and execution of our Application Security program. Reporting to the Vice President of Security Operations, this leader will be responsible for maturing and optimizing application security capabilities across the software development lifecycle, ensuring secure-by-design principles are embedded into engineering practices while enabling rapid delivery of innovative products.

This individual will partner closely with Engineering, Product Management, Architecture, DevOps, Cloud Engineering, and Security Operations to integrate security into every phase of software development. The successful candidate will have extensive experience building or transforming Application Security programs within complex technology organizations and will possess the ability to influence engineering culture through collaboration rather than gatekeeping.

Role Responsibilities:

Application Security Strategy

  • Develop and execute the enterprise Application Security strategy aligned with business and technology objectives.
  • Build and mature a scalable Application Security program supporting modern software development practices.
  • Define the long-term roadmap for secure software development across cloud, web, mobile, APIs, and emerging technologies.
  • Establish secure-by-design principles and integrate them throughout the Software Development Life Cycle (SDLC).

Secure Development Lifecycle (SSDLC)

  • Lead the implementation and continuous improvement of a Secure Software Development Lifecycle (SSDLC).
  • Develop standards and security requirements for application development.
  • Partner with engineering teams to integrate security early within CI/CD pipelines.
  • Promote developer-friendly security practices that minimize friction while improving software security.

Security Testing & Assurance Oversee enterprise application security testing, including:

  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
  • Interactive Application Security Testing (IAST)
  • API Security Testing
  • Container Security
  • Infrastructure-as-Code (IaC) Security
  • Secure code reviews
  • Penetration testing coordination

DevSecOps Enablement

  • Partner with DevOps teams to embed automated security controls into CI/CD pipelines.
  • Improve automation of security testing and vulnerability management.
  • Reduce developer burden through integrated tooling and streamlined workflows.
  • Measure security effectiveness while enabling engineering velocity.

Vulnerability Management

  • Establish application vulnerability management standards and service level objectives.
  • Prioritize remediation activities based on exploitability and business risk.
  • Develop executive reporting for application security risk.
  • Track remediation effectiveness across engineering organizations.

Cloud & Modern Architecture Security Provide application security guidance for:

  • Cloud-native applications
  • Microservices
  • APIs
  • Containers
  • Kubernetes
  • Serverless architectures
  • Artificial Intelligence and Machine Learning applications
  • Third-party integrations

Engineering Partnership

  • Build trusted relationships with engineering leadership.
  • Champion security as an engineering quality function.
  • Develop security champions programs across engineering organizations.

Leadership

  • Lead, mentor, and develop a high-performing Application Security team.
  • Establish performance metrics and operational objectives.
  • Manage vendor relationships and application security technologies.
  • Support hiring and organizational growth as the program matures.
  • Mentor developers on secure coding practices and emerging threats.

Role Requirements:

  • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field required.
  • Advanced degree preferred.
  • 10+ years of progressive experience in Application Security, Software Security, Product Security, Secure Engineering, or related cybersecurity disciplines.
  • 5+ years leading Application Security teams.
  • Demonstrated success building, transforming, or significantly maturing Application Security programs within enterprise organizations.
  • Experience partnering closely with software engineering organizations in Agile and DevSecOps environments.
  • Strong understanding of: Secure Software Development Lifecycle (SSDLC) OWASP Top 10 Secure coding principles Threat modeling Modern authentication protocols API security Cloud-native application security Container security CI/CD security DevSecOps Software supply chain security AI-assisted software development ("vibe coding") governance and secure use Application vulnerability management
  • Possesses at least one of the following certifications (o4 comparable alternative): CISSP CSSLP GIAC Secure Software Programmer (GSSP) GIAC Cloud Security Automation (GCSA)

What Success Looks Like: Within the first 12–18 months, this leader will

  • Complete a comprehensive assessment of the organization's Application Security maturity.
  • Develop and execute a multi-year Application Security transformation roadmap.
  • Fully integrate security into CI/CD pipelines across major engineering organizations.
  • Implement meaningful risk-based application security metrics and executive dashboards.
  • Reduce application vulnerability remediation times while improving engineering satisfaction.
  • Standardize threat modeling, secure code review, and security testing practices.
  • Develop measurable improvements in software security posture without negatively impacting developer productivity.

Work Shift - HYBRID

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few. Please see the benefits below specific to your country. If applicable, additional role-specific benefits will be mentioned during your interview process or in an offer of employment.

Your United States specific benefits include:

  • Parental Leave
  • Family First Programs
  • Medical, Dental, and Life Insurance
  • Tuition Repayment Assistance Program

For residents of Colorado, California, Connecticut, Delaware, Minnesota, and Pennsylvania: Please do not respond to any questions on this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.

Salary

The base salary range is $200,000 - $215,000 USD per year, total on target compensation includes a base salary plus a variable target incentive that aligns with individual and company performance.

Other Details

As part of the application process, all applicants are required to take assessments. Western Union has partnered with a 3rd party provider to administer these tests. Applicants will need to provide their name and email address in order to process the assessments. If you have any questions, you may reach out to [email protected].

We are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

#LI-AM3

Estimated Job Posting End Date:

09-14-2026

This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Western Union's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Western Union's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Western Union's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.