Engineering Manager, Application Security

Role overview

This Engineering Manager role leads the Application Security function for a B2B digital closing platform that supports real estate transactions, where money, identities, and sensitive documents flow through the product. It is a builder's role focused on reimagining how AppSec operates in an AI-assisted era, scaling coverage and output per engineer through automation rather than headcount. The manager partners with Platform, Infrastructure, and product engineering leaders to embed security earlier in the development lifecycle.

Responsibilities

- Lead and grow the Application Security team, coaching senior engineers and owning delivery against the security roadmap - Build automated penetration testing pipelines and AI-driven triage for findings from SAST, DAST, and SCA tooling - Implement agentic review of engineering proposals and design docs to surface risks earlier in the lifecycle - Run continuous red-teaming exercises that test both systems and underlying assumptions - Set the security vision across anomaly detection in production traffic, model-driven threat hunting, and defenses against AI-enabled attackers

Requirements

- Experience leading and growing application security teams, with a builder mindset for reshaping how AppSec operates - Deep familiarity with secure design review, vulnerability triage, internal penetration testing, and incident response support - Strong background in JavaScript/Node.js and Kubernetes environments, plus the broader security tooling ecosystem - Ability to partner across Platform, Infrastructure, and product engineering to embed security into the development lifecycle - Entrepreneurial approach to scaling impact through AI-assisted and automated workflows

Nice to have

- Experience designing AI-augmented security programs or agentic security tooling