Senior Manager, Application Security

About the role

Lead the creation of a dedicated application security function in a fast‑growing, fully remote technology environment. You will combine hands‑on security expertise with people management, strategic planning and cross‑functional collaboration to embed secure development practices across engineering teams.

Key responsibilities

• Define and own the application security roadmap, including vulnerability management, threat modeling, security reviews and remediation processes.
• Conduct hands‑on security reviews, triage vulnerabilities and work with engineers to remediate while scaling processes.
• Embed security‑by‑default practices throughout the software development lifecycle, integrating automated scanning into CI/CD pipelines.
• Design an AI‑first security strategy, evaluating AI‑assisted code analysis, automated triage and remediation tools.
• Oversee third‑party vendor assessments, zero‑trust principles, and cloud security collaboration.
• Lead and develop the Compliance Lead and IT team, aligning security, IT operations and compliance under a unified strategy.

Required profile

• At least 7 years of security experience with substantial hands‑on application security work.
• Minimum 2 years of people‑management experience guiding specialist teams.
• Proven track record building or maturing an application security program in a high‑growth SaaS environment.
• Strong strategic communication skills to convey security posture to senior leaders, customers and auditors.

Required skills

• Deep knowledge of OWASP principles, common application vulnerabilities and secure software design.
• Experience with security tools such as Snyk, Wiz, Cloudflare or Okta.
• Hands‑on ability to read and assess application code, modern web and API architectures.
• Familiarity with CI/CD pipelines, automated security scanning and AI‑assisted security tools.

What we offer

• Annual base salary $177,000–$240,000 USD, dependent on location and experience.
• Fully remote work environment with significant autonomy and direct access to engineering leadership.
• Opportunity to shape an AI‑first security program and influence enterprise security practices.
• Collaboration with an established team of IT and compliance professionals and high visibility with customers and auditors.