Enterprise Application Security Senior Manager

Enterprise Application Security Senior Manager

Company:

The Boeing Company

The Boeing Company’s Enterprise Security organization is currently seeking an Enterprise Application Security Senior Manager to join the team in Hazelwood, MO; Mesa, AZ; North Charleston, SC; or Seattle, WA. 

The Enterprise Application Security Senior Manager will lead a strategic program aimed at identifying and remediating application-layer vulnerabilities across our global aerospace enterprise.

This leader will be responsible for the oversight and expansion of a modern, risk-based application vulnerability management program, working across both internally developed and third-party software applications. The role emphasizes compliance with regulatory standards such as ITAR, and close alignment with DevSecOps and secure software development practices.

You will lead the strategy and execution of proactive and reactive vulnerability identification, secure SDLC integrations, third-party software risk assessment, and enterprise application scanning. The ideal candidate will be adept at navigating large-scale, hybrid technology environments and driving measurable security outcomes in complex application ecosystems.

Position Responsibilities:

• Lead the full lifecycle of application vulnerability management across web, mobile, and enterprise applications, including discovery, assessment, prioritization, and remediation tracking

• Drive secure software development practices by integrating security testing tools and processes (e.g., SAST, DAST, IAST, SCA) into CI/CD pipelines

• Develop policies, standards, and controls related to application vulnerability management, remediation SLAs, and secure development

• Collaborate with software engineering, architecture, and DevOps teams to remediate identified vulnerabilities and improve code security posture

• Build, manage, and report on KPIs and dashboards related to application vulnerability risk and compliance for both technical and executive audiences

• Coordinate enterprise-wide assessments of application-layer risks, including third-party software evaluations and open-source software governance

• Partner with Global Trade Controls, Governance/Risk/Compliance, and infrastructure teams to ensure applications hosting Export Controlled data meet compliance obligations (e.g., ITAR, EAR)

• Lead team members and provide technical direction to cybersecurity analysts and application security engineers

• Stay ahead of evolving threats, secure development best practices, OWASP Top 10, and emerging standards in application security

• Oversee vendor solutions for application vulnerability scanning and ensure they meet performance and SLA expectations

• Support audits, incident response activities, and compliance assessments focused on application security and related vulnerabilities

Basic Qualifications (Required Skills/Experience):

• Bachelor’s degree or higher

• 5+ years of experience in operating system security and/or application security

• 5+ years of experience with industry tools in support of vulnerability management

• 5+ years of experience with industry standard cybersecurity frameworks (NIST, OWASP, DFARS)

• 5+ years of experience with cloud containerization

• 5+ years of experience leading DevSecOps teams to deploy a cloud or on-prem DevSecOps solutions

Preferred Qualifications (Desired Skills/Experience):

• Master’s degree in Cybersecurity, Business, or related technical field

• Experience with tools like GitLab/GitHub CI/CD, Jenkins, and integrations with application security tooling

• Experience with compliance frameworks such as NIST 800-53, ISO 27001, NIST CSF, or CMMC

• Experience in open-source software risk management and Software Bill of Materials (SBOM) practices

• Experience presenting complex application security issues to technical and non-technical audiences

• Experience integrating vulnerability data with GRC, SIEM, or enterprise risk management platforms

Drug Free Workplace:

Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Pay & Benefits:

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable c