Senior Application Security Manager

Job summary

The role involves leading the application security strategy and vulnerability management within a cybersecurity team. The Senior Application Security Manager will work closely with engineering squads to embed security processes and ensure compliance with various regulations.

Qualifications

• Over 10 years of experience in application security and information security strategy, particularly in compliance-heavy environments.
• Background as a senior security engineer transitioned into management, with hands-on technical expertise.
• Proven track record of mentoring engineers and maintaining team accountability without micromanagement.
• Experience in risk-based triage and turning security signals into prioritized actions.
• Familiarity with using AI and automation to enhance security coverage.
• Ability to influence organizational culture and work collaboratively with engineering teams.
• Experience with fintech compliance requirements is advantageous.

Responsibilities

• Manage vulnerability processes from reporting to mitigation, establishing a long-term application security strategy.
• Develop a structured, risk-ranked remediation approach for vulnerabilities.
• Provide company-wide reporting on vulnerability posture for leadership visibility.
• Create and implement an AppSec roadmap with clear delivery expectations.
• Collaborate with engineering squads to integrate security processes into their workflows.
• Enhance team impact through automation and AI solutions.
• Mentor and develop engineers to achieve higher capabilities.
• Support compliance obligations related to security vulnerabilities across various standards.
• Reduce attack surfaces through technical controls and policy enhancements.

Skills

• Strong leadership and mentoring abilities.
• Technical depth in application security and information security.
• Proficiency in risk management and compliance frameworks.
• Familiarity with automation tools and AI in security contexts.

Education

• Relevant degree in Computer Science, Information Security, or a related field is preferred.

Tools

• Familiarity with security tools and platforms relevant to application security and vulnerability management.