IT Application Security Manager
Core
Develop enterprise application security strategy, lead security teams, and integrate security across the application lifecycle.
Role type
Senior IC application security manager with people leadership
Builds
Enterprise application security programs and secure development practices
Domain
Cybersecurity, Application Security, Cloud Security
Required skills
Application security strategy, DevSecOps, Agile, CI/CD, Cloud-native security, Threat modeling, Vulnerability management, Secure code review, API security, Compliance frameworks
Preferred skills
Masters degree in CS/Cybersecurity, CISSP/CSSLP/GWAPT/GSSP/CCSP/CISM certifications, Azure Security Engineer Associate
Technologies
AWS, Azure, Google Cloud Platform, CI/CD, SAST, DAST, SCA, IAST, API, Container, IaC, Mobile, OWASP
Responsibilities
Develop enterprise application security strategy, lead and mentor application security analysts, integrate security into design and architecture reviews, oversee application security testing (SAST, DAST, SCA, IAST, API, container, IaC, mobile), facilitate threat modeling with development teams, establish application vulnerability management processes, conduct manual secure code reviews, support secure application development across AWS, Azure, and GCP, establish safe API security rules, collaborate on training covering OWASP Top 10 and secure coding, conduct application security risk assessments, support cyber incident response, support compliance initiatives (NIST, OWASP, PCI DSS, HIPAA, etc.), track program performance metrics.
Seniority
Senior, hands-on IC with team leadership
