See Yourself as an Application Security DirectorThe Director of Application Security leads the strategy, execution, and continuous improvement of Radian's Application Security program. This senior individual-contributor role combines deep technical expertise, program leadership, and organizational influence to translate enterprise security priorities into a clear, risk-informed roadmap and measurable engineering outcomes. Operating as a hands-on player-coach, the Director provides technical direction and mentorship while also contributing directly to implementation, automation, integration, and problem-solving alongside security engineers and development teams. The Director partners with technology and business leaders to embed security into software delivery and contributes to broader Platform Security strategy, governance, tooling, and transformation.
See Your Primary Duties and Responsibilities- Program Strategy and Roadmap: Define and execute the Application Security strategy, roadmap, operating model, and annual objectives in alignment with Information Security and technology priorities. Establish measurable outcomes and adjust priorities based on risk, business needs, and program performance.
- Hands-On Engineering and Program Leadership: Provide technical and operational direction for Application Security engineering while contributing directly to priority implementation and engineering work. Translate strategy into executable work, collaborate with engineers and developers on solution design, automation, integrations, and complex technical problems, and mentor through active partnership, constructive feedback, and respect for diverse perspectives. Build trust, navigate competing priorities with tact, remove delivery barriers, and promote accountability for quality and outcomes.
- Secure Software Delivery: Partner with Application Development, Product, DevOps, Cloud, and Architecture leaders to embed security throughout the SDLC. Advance secure design, threat modeling, code review, open-source governance, developer enablement, and automated testing within CI/CD workflows.
- Technical Capabilities, Automation, and Custom Engineering: Own the effectiveness of Application Security tools, integrations, services, and internally engineered solutions. Direct investments and implementation decisions that improve coverage, usability, reliability, and data quality across SAST, DAST, SCA, secrets detection, penetration testing, and related capabilities.
- Risk and Remediation Management: Establish risk-based processes to assess, prioritize, communicate, and remediate application vulnerabilities and design risks. Provide escalation and decision support for material findings, exceptions, false positives, and persistent remediation barriers.
- Governance, Metrics, and Assurance: Maintain standards, processes, service objectives, metrics, and reporting that demonstrate program performance and control effectiveness. Partner with Risk, Compliance, Assurance, and Legal to support policy, audit, regulatory, and customer obligations.
- Cross-Portfolio Leadership: Represent Application Security in enterprise initiatives and lead selected Platform Security efforts spanning vulnerability management, cloud security, security architecture, data, tooling, vendors, and process transformation. Contribute to portfolio strategy, roadmaps, and operating decisions.
See the Job SpecificationsYour Knowledge, Skills, and Abilities:- 10+ years of progressive experience in application security, product security, software engineering, DevSecOps, or related security disciplines, including leadership of complex programs, technical teams, or enterprise initiatives.
- Demonstrated ability to define strategy and roadmaps, prioritize investment based on risk, and lead delivery through measurable outcomes and continuous improvement.
- Deep knowledge of secure SDLC practices, threat modeling, secure design and code review, vulnerability remediation, penetration testing, and developer security enablement.
- Demonstrated hands-on ability with Application Security technologies and automation, including SAST, DAST, SCA, secrets detection, CI/CD integrations, Git-based workflows, scripting, APIs, and security data analysis. Ability to contribute directly to solution design, implementation, integration, troubleshooting, and lifecycle management while providing technical leadership to others.
- Knowledge of modern application and cloud architectures, including APIs, microservices, containers, serverless technologies, identity and access controls, secrets management, and software supply chain risks.
- Strong leadership, judgment, emotional intelligence, and executive communication skills, with the ability to influence cross-functional leaders, provide supportive mentorship to technical staff, navigate sensitive or competing priorities with tact, and translate complex security risks into clear decisions and actions.
Your Education, Certifications and Prior Work-Related Experience:
- Degree Requirement: Bachelor's Degree or Equivalent Experience
- Degree Preferred: Master's Degree or Equivalent Experience
- Certifications: Security or technical Certifications, such as CISSP, CSSLP, AWS Solutions Architect, or comparable credentials are preferred
- Work Experience: 10 years of prior work-related experience
- Experience in a regulated environment and familiarity with frameworks and standards such as NIST CSF, NIST SSDF, OWASP SAMM, OWASP ASVS, PCI DSS, SOX, and SOC 2 are preferred
- Competitive Compensation: anticipated base salary from $125,000 to $173,000 based on skills and experience. This position is eligible to participate in an annual incentive program.
- Rest and Relaxation. This role is eligible for 25 days of paid time off annually, which is prorated in the year of hire based on hire date. In addition, based on your hire date, you will be eligible for 9 paid holidays + 2 floating holidays. Parental leave is also offered as an opportunity for all new parents to embrace this exciting change in their lives.
- Our Company Makes an Impact. We've been recognized by multiple organizations like Bloomberg's Gender-Equality Index, HousingWire's Tech 100, and The Forum of Executive Women's Champion of Board Diversity. Radian has also pledged to SHRM's CEO Action for Inclusion & Diversity commitment.
- Comprehensive Health Benefits. Multiplemedical plan choices, including HSA and FSA options, dental, vision, and basic life insurance.
- Prepare for your Future. 401(k) with a top of market company match (did we mention the company match is immediately vested?!) and an opportunity to participate in Radian's Employee Stock Purchase Plan (ESPP).
- Homebuyer Perks. Our Homebuyer Perks program helps employees navigate the home searching, buying, selling, and refinancing processes and provides valuable financial benefits to encourage, enable, and support home ownership.
- Additional Benefits. To learn more about our benefits offerings, visit our Benefits Page.
#LI-AB
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. 
