Application Security Manager
Core
Lead a team of 5–7 application security engineers to build and scale an enterprise Application Security program, focusing on Secure SDLC, web/API protection, CI/CD security, and AI/LLM security.
Role type
Senior IC application security manager (team lead)
Builds
A high-performing application security team and repeatable operating rhythm across Secure SDLC, web application and API protection, CI/CD pipeline security, SaaS security, and AI/LLM security.
Domain
Cybersecurity, Application Security, Cloud Security
Required skills
Application security program management, team leadership, SAST/SCA/DAST/secret scanning, web and API vulnerability remediation, CI/CD security, WAF/WAAP operations, threat modeling, supply chain risk management, SaaS Security Posture Management, AI/LLM security practices
Preferred skills
Building teams from the ground up, threat modeling methodologies (STRIDE, PASTA), AI/LLM security risks, SSPM, WAAP
Technologies
GitHub Actions, Jenkins, GitLab, AWS, Azure, GCP, Kubernetes, WAF, SAST, SCA, DAST, CI/CD pipelines
Responsibilities
Lead and develop a growing team of application security engineers; Run day-to-day team operations including sprint planning and vendor coordination; Provide technical direction and guidance to engineers on triage and remediation; Define team processes, runbooks, and RACI; Drive adoption of security controls and manage risk exception processes; Oversee SAST, SCA, secret scanning, and DAST operations; Lead web application and API protection (WAAP) onboarding; Oversee CI/CD security controls and open-source supply chain risk management; Manage the SaaS Security Posture Management (SSPM) program; Help stand up AI/LLM security practices; Define and report program KPIs to executive stakeholders
Seniority
Senior, hands-on IC with management responsibilities
