Application Security Manager
Core
Lead and mature the application security program, guiding a team of engineers and testers to improve security operations and risk governance for the enterprise.
Role type
Senior IC Application Security Manager (Team Lead)
Builds
Enterprise application security program, automated security testing strategies, and security guardrails
Domain
Cybersecurity / Application Security / Cloud Security
Required skills
Application security strategy, Penetration testing (app/network/cloud), SAST/SCA/DAST operations, Risk assessment, Team leadership, Vulnerability management, Security policy development, Cloud architecture knowledge, OWASP Top 10 expertise
Preferred skills
OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CISSP, CSSLP certifications, Experience leading penetration testing teams
Technologies
SAST, SCA, DAST, Cloud platforms, Automated security tooling
Responsibilities
Lead and mentor application security engineers and penetration testers, Manage and mature the application security program, Set strategies for SAST, SCA, DAST, and penetration testing operations, Assess risk and provide security advice for business decisions, Oversee vulnerability identification and measurement, Guide development teams through application reviews against OWASP Top 10, Work with Risk & Compliance teams on audits (SOC 2, PCI-DSS, HIPAA), Lead projects to implement enterprise security technologies, Define security guardrails through automated tool policies
Seniority
Senior, hands-on IC with team leadership
