Sr. Engineering Manager, Application Security
Senior Engineering Manager leading Application Security squad to build secure software by default through threat modeling, design reviews, vulnerability management, and developer tooling. Requires hands-on team leadership and expertise across the AppSec stack.
About the job
Responsibilities
- Oversee the development of paved roads, libraries, and guardrails that make it easier for developers to commit, test, build, deploy, and operate code securely by default.
- Build and maintain the threat modeling, design review, and vulnerability management programs that protect customers, employees, and the business.
- Drive the adoption of AI across AppSec operations to achieve scaled security workflows, creating leverage for senior engineers.
- Lead and mentor engineers on Betterment’s senior-leaning AppSec squad.
- Establish strong lines of communication with stakeholders across engineering, product, legal, compliance, and risk to understand and deeply support the needs of teams building products across all business lines.
- Inspire and maintain a strong, equitable engineering culture founded on transparency, inclusivity, mentorship, and collaboration.
- Continuously innovate and seek out ways to meet the near- and long-term strategic security needs of the organization.
Requirements
- Expertise across the application security stack: secure SDLC, threat modeling, secure design review, code review, vulnerability management, and the cloud-native ecosystem (AWS, containers, Kubernetes, CI/CD).
- Experience with hands-on managing, mentoring, and inspiring a team of talented security engineers, including senior engineers. Demonstrated success as a true player-coach is a must.
- Experience establishing or scaling a Security Champions or distributed threat modeling program, with a focus on empowering engineering squads to own security outcomes and integrating these practices into the existing software development lifecycle.
- Experience leading execution of large team initiatives and execution of smaller concurrent projects in partnership with senior engineers.
- Familiarity with AI-assisted security tools and a curiosity for exploring how AI can enhance both security workflows and the security posture of the AI-powered features engineers are building.
- A real passion for application security and for empowering developers to do the right thing easily.
- Experience collaborating with other engineering teams, product managers, subject matter experts, and non-technical stakeholders such as legal, compliance, and risk.
Nice-to-Haves
- Experience with AI-assisted security tools and workflows.
Skills
Application Security, Secure Sdlc, Threat Modeling, Secure Design Review, Vulnerability Management, AWS, Kubernetes, CI/CD, Containers, Ai-Assisted Security Tools
Similar jobs
Security Engineering jobs
Spade
United StatesOwns production-edge security for enterprise financial-institution connectivity, including PKI, mTLS, AWS networking, webhook security, and vulnerability remediation. Requires 6+ years of hands-on platform, infrastructure, or network security engineering experience.
Snowflake
Menlo Park, CABuild secure, large-scale platforms, controls, monitoring, and AI-augmented pipelines that improve Snowflake’s cloud security posture across hundreds of millions of assets and multiple cloud providers. Requires 5+ years of software engineering experience and expertise in secure distributed systems.
Atomicmachines
Emeryville, CALeads enterprise network architecture, cloud connectivity, security, operations, and incident response across corporate and manufacturing environments. Requires 10+ years of network engineering experience, people leadership, AWS networking expertise, and strong network security knowledge.
Anyscale
IndiaOwn detection engineering and lead incident response across corporate and production environments, building cloud, endpoint, runtime, and Kubernetes coverage. The role requires 6+ years in security, hands-on detection development, and end-to-end incident leadership.
Anyscale
San Francisco, CA
Own and advance the security of Anyscale’s production and multi-cloud infrastructure, including hardening, segmentation, Kubernetes runtime protection, and access controls. Requires 8+ years of security engineering experience and hands-on expertise with AWS, Azure, Kubernetes, and cloud security tooling.