Senior Manager, Application Security

Role overview Lead the development of an application security program while managing a small team responsible for IT operations and compliance. The role combines hands-on security work with program strategy, people leadership, and communication with engineering leaders and enterprise customers. Over time, you will bring security, IT, and compliance practices together under a shared strategy.

Responsibilities - Set the application security roadmap, including threat modeling, security reviews, vulnerability handling, and remediation of penetration-test findings. - Initially triage security findings, review designs, and work directly with engineers; build repeatable practices that can grow beyond individual efforts. - Make secure development practices part of engineering workflows, including dependency and secrets management and automated scanning. - Guide the use of AI-assisted security tools, define what they can handle, and establish how their results are checked. - Manage and support IT and compliance leads, aligning priorities, access controls, identity practices, device security, and compliance evidence. - Lead application-layer incident response and explain security posture, risks, and compliance to leadership, customers, prospects, and auditors.

Requirements - At least seven years in security, including substantial hands-on application security work and experience building or maturing a program. - Experience with security reviews, threat modeling, vulnerability management, penetration testing, and secure design; able to discuss practical risks with senior engineers. - Able to read code and understand modern web and API architectures well enough to work with engineers on fixes. - At least two years managing people, including experienced practitioners who may have deeper expertise in their own areas. - Regular use of AI agents and an understanding of how AI-assisted development and security tools affect application security work. - Strong communication skills, including the ability to explain technical risk in terms that leadership and customers can use.

Nice to have The source notes that a SOC 2 Type 2 program is already in place and that the role may help shape work toward expanded frameworks and enterprise compliance needs.

Benefits and work setup - Fully remote role, available across the United States; candidates must be authorized to work where they live, and visa sponsorship is not offered. - Published annual salary range is $177,000–$240,000, with location-specific ranges and final compensation depending on location, experience, and expertise.