Sr. Director, Security Testing and Validation
Roseland, NJ, United States
ADP is hiring a Sr. Director, Security Testing and Validation
Unlock your career potential within our Global Security Organization at ADP. Do you have a passion for going on the offensive to safeguard critical information? As ADP’s Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets — their employee data. We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times. From the cloud to the data center and across every emerging device, you’ll join a team of experts in the GSO who are always staying one step ahead in this ever-changing world of data by continually evolving our strategies and technologies to protect ADP and our clients.
This role will lead ADP’s enterprise-wide application security testing practices, including penetration testing, dynamic application security testing (DAST), and driving end-to-end remediation efforts. You’ll work in close partnership with engineering, product, and cloud platform teams to embed security into every phase of the SDLC. You’ll also be responsible for shaping the future of application security by leveraging Artificial Intelligence (AI), Generative AI, and agentic automation to create scalable, intelligent security testing and remediation capabilities
We are working in a Hybrid work environment, working out of our Roseland, NJ or Alpharetta, GA office three days a week with the flexibility of working from home the other two days. We are not open to remote work for this role.
What You’ll Do:
- Lead and mature enterprise-scale application security testing programs, including Pen Testing, DAST, and automated scanning tools.
- Manage a high-performing team of security engineers and analysts to support secure development and application deployment practices.
- Drive vulnerability remediation initiatives across the organization, partnering with product and engineering leaders.
- Champion the use of AI and Generative AI, including LLMs and agent-based frameworks, to scale detection, testing, triage, and remediation.
- Define and own a comprehensive roadmap for application security innovation, ensuring alignment with GSO and business objectives.
- Collaborate across ADP’s development and DevSecOps teams to integrate security into CI/CD pipelines and “shift-left” strategies.
- Define, track, and report key security KPIs/KRIs for transparency and performance measurement.
- Foster a culture of continuous improvement and proactive threat detection.
Qualifications:
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.
- 12+ years of experience in application security, with deep exposure to secure software development, application threat modeling, and remediation practices.
- 5+ years of leadership experience in managing security engineering or AppSec teams.
- Strong experience with pen testing, DAST tools, static analysis (SAST), and vulnerability management workflows.
- Solid experience integrating security testing with CI/CD pipelines (e.g., GitLab, Jenkins, Bitbucket, SonarQube).
- Familiarity with secure SDLC, OWASP Top 10, SANS CWE, and modern development practices including cloud-native architectures.
- Excellent communication skills with the ability to influence senior leaders, engineers, and cross-functional stakeholders
Preferred Qualifications:
- Master’s degree in Information Security, Computer Science, or a related field.
- Experience implementing AI or GenAI solutions in cybersecurity, particularly for automated detection, triage, or policy generation.
- Exposure to agentic frameworks and LLM-based orchestration in security applications.
- Background in cloud security (AWS, Azure, GCP) and container orchestration (Docker, Kubernetes).
- Relevant security certifications (e.g., CISSP, CSSLP, OSCP, GPEN, GWAPT)
You'll love working here because:
- Be yourself in a culture that values equity, inclusion, and belonging and creates a safe space for diverse perspectives and insights.
- Belong by joining one of nine Business Resource Groups to connect globally with networks and allies who share common interests and experiences.
- Grow your career in an agile, fast-paced environment with plenty of opportunities to progress.
- Continuously learn through ongoing training, development, and mentorship opportunities.
- Be your healthiest. Best-in-class benefits start on Day 1 because healthy associates are happy ones.
- Focus on your mental health and well-being. We're here to provide exceptional service to our clients, and none of that happens without each of us taking care of ourselves and being there for one another.
- Join a company committed to giving back and generating a lasting, positive impact upon the communities in which we work and live.
- Get paid to pay it forward. Company-paid time off for volunteering for causes you care about.
What are you waiting for?
Apply now! Jobs.adp.com
#LIEXEC
#LI-Hybrid
#LI-EB2
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Application security Artificial Intelligence Automation AWS Azure Bitbucket CI/CD CISSP Cloud Compliance Computer Science CSSLP DAST DevSecOps Docker GCP Generative AI GitLab GPEN GWAPT Jenkins KPIs Kubernetes LLMs OSCP OWASP Pentesting SANS SAST SDLC SonarQube Threat detection Vulnerability management
Perks/benefits: Career development Health care
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.