Senior Manager, Application Security

About the role

Lead the creation of a dedicated application security function within a fast‑growing, fully remote technology environment. You will combine hands‑on security expertise with people management, strategic planning, and cross‑functional collaboration to embed secure development practices across engineering teams.

Key responsibilities

• Define and own the application security roadmap, including vulnerability management, threat modeling, security reviews, and remediation processes.
• Conduct hands‑on security reviews, triage vulnerabilities, and collaborate with engineers on remediation while scaling processes.
• Embed security‑by‑default practices throughout the software development lifecycle, integrating automated scanning into CI/CD pipelines.
• Design and implement an AI‑first security strategy, evaluating AI‑assisted code analysis and automated remediation.
• Oversee third‑party vendor security assessments and ensure zero‑trust principles across cloud platforms.
• Lead application‑layer incident response and coordinate with infrastructure teams.
• Manage and support the Compliance Lead and IT team, aligning security, IT operations, and compliance under a unified strategy.

Required profile

• At least 7 years of security experience with substantial hands‑on application security work.
• Proven success building or maturing an application security program.
• Minimum 2 years of people‑management experience, providing direction and coaching to specialists.
• Strong strategic communication skills to convey security posture to senior leaders, customers, and auditors.

Required skills

• Deep knowledge of OWASP principles and common application vulnerabilities.
• Experience with security tools such as Snyk, Wiz, Cloudflare, and Okta.
• Proficiency in CI/CD pipeline integration and automated security scanning.
• Familiarity with AI‑assisted security tools and automated vulnerability triage.

What we offer

• Annual base salary ranging from $177,000 to $240,000 (USD), depending on experience and location.
• Fully remote work environment with location eligibility based on regulatory restrictions.
• Significant autonomy and direct access to engineering leadership.
• Opportunity to shape an AI‑first security program and influence enterprise security practices.