Application Security
Pubblicato il 10-08-2026 - Armis in Italia
Application Security & VIPR - EXPERT
The Expert, Application Security & VIPR is a hands-on technical leader responsible for architecting, automating, and continuously improving Armis’ application security posture—while ensuring application vulnerabilities are fully integrated into Armis’ VIPR framework.
This role bridges engineering, product security, and vulnerability management, defining how application risks are identified, prioritized, contextualized, and remediated across Armis’ SaaS and on-prem platforms. You will ensure that AppSec findings are not siloed, but instead correlated with asset intelligence, exploitability, exposure, and business impact.
Key Responsibilities
Application Security Leadership
Lead the Application Security program across all Armis products, embedding security throughout the SDLC.
Perform secure design and architecture reviews, partnering with engineering teams to identify and mitigate risk early.
Conduct and lead threat modeling sessions using STRIDE, DREAD, or PASTA methodologies.
VMDR Integration & Vulnerability Lifecycle
Own application-layer vulnerability management as part of Armis’ VIPR strategy, from detection through remediation and validation.
Integrate AppSec findings (SAST, DAST, SCA, API testing) into centralized vulnerability workflows, risk scoring, and prioritization models.
Correlate application vulnerabilities with asset context, exploit intelligence, and business criticality to drive risk-based remediation.
Track and report VMDR metrics such as MTTD, MTTR, exposure windows, and remediation effectiveness for application vulnerabilities.
Automation & Tooling
Build and maintain automated AppSec pipelines for SAST, DAST, SCA, and API security testing.
Collaborate with DevOps to integrate security scanning into CI/CD pipelines (GitHub Actions, Jenkins, Buildkite).
Partner with Cloud and Infrastructure Security to secure APIs, microservices, and containerized workloads (Docker, Kubernetes).
Engineering Partnership & Ena