Jobs
Jobs
35,046 jobs found
Loading more...
EY
Forward Deployed Engineer - Model Engineering - Senior Manager - Consulting - OPEN Location
Source: National Labor Exchange
EY
Tax Services Senior Analyst - Financial Services - Private Client Services, EDGE
Source: National Labor Exchange
EY
Tax Services Senior Analyst - Financial Services - Private Client Services, EDGE
Source: National Labor Exchange
State of Missouri
Maintenance/Grounds Technician
Source: MO Careers
State of Missouri
Quality Improvement Specialist
Source: MO Careers
State of Missouri
Food Service Worker (FTC-North)
Source: MO Careers
State of Missouri
Food Service Assistant (FTC-North)
Source: MO Careers
State of Missouri
Licensed Practical Nurse
Source: MO Careers
State of Missouri
Youth Services Worker
Source: MO Careers
State of Missouri
Licensed Practical Nurse - SEMORS - Poplar Bluff
Source: MO Careers
State of Missouri
Licensed Clinical Social Worker-FTC SOUTH
Source: MO Careers
State of Missouri
Certified Medication Technician (CMT)- FSH
Source: MO Careers
State of Missouri
Regulatory Tax Auditor (Kansas City, MO) - 7033058
Source: MO Careers
Affordable Care
Dental Patient Care Coordinator
Source: National Labor Exchange
Affordable Care
Dental Assistant
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Valvoline
Entry-level Lube Tech/Technician
Source: National Labor Exchange
Akamai Technologies, Inc.
Senior Enterprise Security Architect
Source: National Labor Exchange
HNTB
CADD Technician III
Source: National Labor Exchange
Acosta Group
District Manager - Wireless
Source: National Labor Exchange
Honeywell
Electrical Engineer II (5878)
AECOM
Business Development Director - Thermal Generation
Source: National Labor Exchange
Walden Security
Intermediate Supervisor, Eastern District of Missouri
Source: National Labor Exchange
Pearson
Advanced Specialist, Application Security
Source: National Labor Exchange
Pearson
Advanced Specialist, Security Engineer
Source: National Labor Exchange
LEGGETT & PLATT, INCORPORATED
Employment Counsel
Insight Global
Drafting Specialist
Source: National Labor Exchange
Insight Global
Lawson Data Quality Analyst
Source: National Labor Exchange
Insight Global
Senior Business Analyst
Source: National Labor Exchange
Insight Global
IT Project Manager
Source: National Labor Exchange
Insight Global
Manufacturing Production Group Leader
Source: National Labor Exchange
CHS Inc.
HR Compliance Expert Analyst
Source: National Labor Exchange
CHS Inc.
Experienced Recruiter - Agricultural Retail and Agricultural Business
Source: National Labor Exchange
Lundbeck
Multi-Specialty Area Sales Manager - Central
Source: National Labor Exchange
Ackrit Inc
MACHINIST
CENTRAL METHODIST UNIVERSITY
E-Sports Head Coach
Loading more...
Job ID #111663
Pearson
Advanced Specialist, Application Security
location_on
Jefferson City, MO
description
Summary
Summary
The Sovereign Team is the technical cybersecurity team of Pearson's cybersecurity organization that works with the Lines of Business on contractual and regulatory obligations as it relates to sovereign requirements from countries around the world. We are not a compliance or audit function; we are the deep technical experts on cloud, infrastructure and application security who hold the architectural knowledge that makes certifications such as FedRAMP, GovRAMP and Cyber Essentials Plus achievable and defensible.
As Application Security Enginee r, you will own application security across the software development lifecycle for Pearson's regulated and sovereign estate. You will embed security into existing product, engineering, DevOps and release processes; threat modeling and architecture review at design, scanning and policy enforcement in the pipeline, and validated remediation before and after release; so that findings reduce real risk rather than accumulate in a queue.
This is a technical role with leadership responsibility. You will set AppSec technical direction, mentor engineers, and act as the escalation point for complex application security problems. It is not a people-management role, but you will be expected to carry senior-level conversations, including tooling, budget and vendor discussions.
Key Responsibilities
Secure SDLC ownership
+ Own and continuously improve a repeatable Application Security process spanning concept and intake, requirements and design, development, build and CI/CD, test and preproduction, release, and production monitoring.
+ Work with Enterprise Application Security to define which AppSec activities and tools apply at each phase, what evidence each phase must produce, who owns the work, and how findings are handled before and after release.
+ Lead threat modeling, use case review and secure design review; authentication and authorization design, privacy, and logging requirements.
+ Set risk based security gates: critical and high risk issues reviewed before release, lower risk items tracked to agreed remediation timelines.
+ Ensure every finding has an owner and an SLA, and is triaged, remediated, accepted or closed as not applicable; never left open by default.
AppSec tooling & automation
+ Own selection, design, onboarding and optimization of the AppSec toolchain; SAST, SCA, secrets scanning, IaC scanning, container scanning, DAST and IAST/RASP.
+ Operate and mature the current stack across the development pipelines/code repositories.
+ Drive repository and space onboarding to close coverage gaps, and run the discovery loop that finds unscanned origins as the estate changes.
+ Enforce pipeline policy and artifact integrity; CI/CD gates, SBOM generation, image scanning and artifact signing.
+ Automate triage, ticket routing and evidence collection to reduce manual effort and improve consistency.
+ Assist with tuning of preventative technologies such as RASP and WAF.
Sovereign & regulated assurance
+ Translate FedRAMP 20x, GovRAMP Rev5, NCSC Cyber Assessment Framework, UK Cyber Essentials Plus and equivalent requirements into concrete application security controls and defensible evidence.
+ Validate that application architecture is deployed correctly against each sovereign requirement; not merely documented as compliant.
+ Provide application penetration test scoping and assurance, and manage remediation followup through to closure.
+ Lead technical audit preparation and evidencequality review; support POA&M and continuous monitoring cycles.
+ Engage directly with 3PAOs, external assessors and government customers on application control questions.
Engagement & technical leadership
+ Act as an application security entry point at project intake and cyber security kickoff; confirming application tier, scantool onboarding, baseline compliance and go live requirements.
+ Provide oversight, direction and advice to engineers by reviewing security designs and implementations.
+ Coach developers on secure coding and give actionable feedback while design and code decisions are still fresh.
+ Build reusable standards, playbooks and onboarding material so AppSec capability scales beyond individuals.
+ Communicate application risk clearly to engineering teams, business partners and senior leadership.
Essential Skills & Experience
+ Bachelor's degree in computer science, Information Security, MIS or an equivalent technical discipline.
+ Significant handson application security experience at a senior or lead level, in an enterprise environment.
+ Deep practical experience with SAST, SCA, secrets scanning and container/IaC scanning; including tuning, falsepositive management and developerfacing triage.
+ Proven experience integrating security into CI/CD pipelines and defining riskbased release gates.
+ Strong threat modeling and secure design review capability (e.g. STRIDE), including authentication and authorization architecture.
+ Working knowledge of OWASP Top 10 and secure coding practice across modern web and API stacks.
+ Cloud security depth in Azure and/or AWS as it applies to application workloads and boundaries.
+ Ability to script and automate (Python or comparable) to reduce manual triage and evidence work.
+ Experience defining and evidencing technical controls for external audit or penetration test.
+ Excellent written and verbal communication; credible with developers and with executive audiences.
Desirable Skills & Experience
+ Direct experience supporting a FedRAMP or GovRAMP authorization from the application side.
+ Familiarity with additional sovereign regimes; UK Cyber Essentials Plus / NCSC Secure Design Principles, EU GDPR and NIS2, China MLPS/PIPL, Saudi NCA ECC, Australia ASD Essential Eight.
+ Experience with vulnerability aggregation and posturemanagement platforms (ArmorCode, Wiz or equivalents).
+ Software development background and the ability to review code credibly, not just scan output.
+ Experience running a developer security enablement or training programme.
+ Prior experience mentoring engineers or leading a small technical function.
+ Comfort operating in an agile environment with multiple concurrent regulatory deadlines.
+ Professional accreditation such as CISSP, CSSLP, CCSP or equivalent.
Compensation at Pearson is influenced by factors including skill set, experience, and location.
The full-time salary range for this role is $100,000 - $160,000. This position is eligible to participate in an annual incentive program. Information on benefits can be found here.
Applications will be accepted through 2nd November 2026. This window may be extended depending on business needs.
Apply today and imagine the impact you can make.
\#LI-P1
Who we are:
At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning op...
The Sovereign Team is the technical cybersecurity team of Pearson's cybersecurity organization that works with the Lines of Business on contractual and regulatory obligations as it relates to sovereign requirements from countries around the world. We are not a compliance or audit function; we are the deep technical experts on cloud, infrastructure and application security who hold the architectural knowledge that makes certifications such as FedRAMP, GovRAMP and Cyber Essentials Plus achievable and defensible.
As Application Security Enginee r, you will own application security across the software development lifecycle for Pearson's regulated and sovereign estate. You will embed security into existing product, engineering, DevOps and release processes; threat modeling and architecture review at design, scanning and policy enforcement in the pipeline, and validated remediation before and after release; so that findings reduce real risk rather than accumulate in a queue.
This is a technical role with leadership responsibility. You will set AppSec technical direction, mentor engineers, and act as the escalation point for complex application security problems. It is not a people-management role, but you will be expected to carry senior-level conversations, including tooling, budget and vendor discussions.
Key Responsibilities
Secure SDLC ownership
+ Own and continuously improve a repeatable Application Security process spanning concept and intake, requirements and design, development, build and CI/CD, test and preproduction, release, and production monitoring.
+ Work with Enterprise Application Security to define which AppSec activities and tools apply at each phase, what evidence each phase must produce, who owns the work, and how findings are handled before and after release.
+ Lead threat modeling, use case review and secure design review; authentication and authorization design, privacy, and logging requirements.
+ Set risk based security gates: critical and high risk issues reviewed before release, lower risk items tracked to agreed remediation timelines.
+ Ensure every finding has an owner and an SLA, and is triaged, remediated, accepted or closed as not applicable; never left open by default.
AppSec tooling & automation
+ Own selection, design, onboarding and optimization of the AppSec toolchain; SAST, SCA, secrets scanning, IaC scanning, container scanning, DAST and IAST/RASP.
+ Operate and mature the current stack across the development pipelines/code repositories.
+ Drive repository and space onboarding to close coverage gaps, and run the discovery loop that finds unscanned origins as the estate changes.
+ Enforce pipeline policy and artifact integrity; CI/CD gates, SBOM generation, image scanning and artifact signing.
+ Automate triage, ticket routing and evidence collection to reduce manual effort and improve consistency.
+ Assist with tuning of preventative technologies such as RASP and WAF.
Sovereign & regulated assurance
+ Translate FedRAMP 20x, GovRAMP Rev5, NCSC Cyber Assessment Framework, UK Cyber Essentials Plus and equivalent requirements into concrete application security controls and defensible evidence.
+ Validate that application architecture is deployed correctly against each sovereign requirement; not merely documented as compliant.
+ Provide application penetration test scoping and assurance, and manage remediation followup through to closure.
+ Lead technical audit preparation and evidencequality review; support POA&M and continuous monitoring cycles.
+ Engage directly with 3PAOs, external assessors and government customers on application control questions.
Engagement & technical leadership
+ Act as an application security entry point at project intake and cyber security kickoff; confirming application tier, scantool onboarding, baseline compliance and go live requirements.
+ Provide oversight, direction and advice to engineers by reviewing security designs and implementations.
+ Coach developers on secure coding and give actionable feedback while design and code decisions are still fresh.
+ Build reusable standards, playbooks and onboarding material so AppSec capability scales beyond individuals.
+ Communicate application risk clearly to engineering teams, business partners and senior leadership.
Essential Skills & Experience
+ Bachelor's degree in computer science, Information Security, MIS or an equivalent technical discipline.
+ Significant handson application security experience at a senior or lead level, in an enterprise environment.
+ Deep practical experience with SAST, SCA, secrets scanning and container/IaC scanning; including tuning, falsepositive management and developerfacing triage.
+ Proven experience integrating security into CI/CD pipelines and defining riskbased release gates.
+ Strong threat modeling and secure design review capability (e.g. STRIDE), including authentication and authorization architecture.
+ Working knowledge of OWASP Top 10 and secure coding practice across modern web and API stacks.
+ Cloud security depth in Azure and/or AWS as it applies to application workloads and boundaries.
+ Ability to script and automate (Python or comparable) to reduce manual triage and evidence work.
+ Experience defining and evidencing technical controls for external audit or penetration test.
+ Excellent written and verbal communication; credible with developers and with executive audiences.
Desirable Skills & Experience
+ Direct experience supporting a FedRAMP or GovRAMP authorization from the application side.
+ Familiarity with additional sovereign regimes; UK Cyber Essentials Plus / NCSC Secure Design Principles, EU GDPR and NIS2, China MLPS/PIPL, Saudi NCA ECC, Australia ASD Essential Eight.
+ Experience with vulnerability aggregation and posturemanagement platforms (ArmorCode, Wiz or equivalents).
+ Software development background and the ability to review code credibly, not just scan output.
+ Experience running a developer security enablement or training programme.
+ Prior experience mentoring engineers or leading a small technical function.
+ Comfort operating in an agile environment with multiple concurrent regulatory deadlines.
+ Professional accreditation such as CISSP, CSSLP, CCSP or equivalent.
Compensation at Pearson is influenced by factors including skill set, experience, and location.
The full-time salary range for this role is $100,000 - $160,000. This position is eligible to participate in an annual incentive program. Information on benefits can be found here.
Applications will be accepted through 2nd November 2026. This window may be extended depending on business needs.
Apply today and imagine the impact you can make.
\#LI-P1
Who we are:
At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning op...
Do You Have a MO Jobs Account?
Your HireMO account is created from your MO Jobs account, so we need to connect the two.
Already have an account?
Sign In
First, Let's Find Your MO Jobs Account
HireMO works together with MO Jobs, the State of Missouri jobs website.
Create an Account to Apply
Your MO Jobs account is connected. Choose an email and password to sign in to HireMO.
You Need a MO Jobs Account First
HireMO works together with MO Jobs, the State of Missouri jobs website. You need a MO Jobs account before you can create your HireMO account.
- Create your MO Jobs account at jobs.mo.gov. It is free.
- Log in to MO Jobs, then click HireMO from there. That link brings you back here to finish your registration.
- Complete your HireMO account.