Senior Manager, Application Security

About the team

Our team is dedicated to leading the configuration of critical perimeter defense systems, including anti-bot technologies, web application firewalls (WAF), and AWS Shield! Our responsibility extends to ensuring the security and resilience of the CI/CD pipeline across a diverse and evolving array of technologies.

We collaborate closely with customers to implement security standard processes, integrating their insights with our technical expertise. The goal is to provide a robust, secure foundation for continuous development and deployment, ensuring our organization stays protected against emerging threats while maintaining operational efficiency. Our passion for innovation and security drives us to stay ahead in safeguarding all facets of the development lifecycle.

About the role

We are seeking an experienced and dynamic Cloud Security Engineering Manager to lead and own a versatile team of security engineers responsible for safeguarding our cloud infrastructure, web applications, and CI/CD pipelines! As a hands-on leader, you will be responsible for all aspects of cloud security, mentor your team, and collaborate with cross-functional teams to ensure secure development practices, robust perimeter defense, and compliance with industry standards.

As a Senior Manager, Application Security, you will:

• Lead, mentor, and manage a team of cloud security engineers responsible for securing our cloud infrastructure, applications, and pipelines.

• Provide technical mentorship and expertise to your team in key areas such as AWS architecture, web application security, anti-bot technologies, CI/CD security, and secure coding practices.

• Coordinate the design, deployment, and maintenance of security services and infrastructure, ensuring robust perimeter defenses, threat detection, and collaborate on incident response processes.

• Manage the configuration and optimization of AWS security services, including WAF, Shield, IAM, GuardDuty, Security Hub, CloudFront, VPC, and KMS, in alignment with standard processes.

• Drive the implementation of Infrastructure as Code (IaC) security using tools like Terraform and AWS CloudFormation, ensuring secure and scalable deployments.

• Collaborate with development, operations, and product teams to ensure security is integrated into all stages of the software development lifecycle.

• Define security metrics, supervise progress, and report on the overall health of the organization’s cloud security posture to executive leadership.

• Manage security incidents and escalations, and work with your team to continuously improve incident response processes, using automation wherever possible.

• Develop and implement security policies, standards, and best practices that align with industry regulations and internal compliance requirements.

• Drive the adoption of secure coding practices and cultivate a culture of security awareness across the organization.

This role has been categorized as a Remote position. “Remote” employees do not have a permanent corporate office workplace and, instead, work from a physical location of their choice, which must be identified to the Company. U.S. employees may live in any of the 50 United States, with limited exceptions.

In California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Minnesota, Nevada, New York, Washington state, and Washington DC the standard base pay range for this role is $177,100.00 - $282,900.00 Annually. This base pay range is specific to California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Minnesota, Nevada, New York, Washington state, and Washington DC and may not be applicable to other locations.

In addition to a competitive base salary this position is also eligible for equity awards based on factors such as experience, performance and location. Actual amounts will vary depending on experience, performance and location.

Who you are

• Strong understanding of AWS architecture and security services, including WAF, Shield, IAM, CloudFront, VPC, GuardDuty, Security Hub, and KMS.

• Validated leadership experience in leading and mentoring a team of cloud or security engineers.

• Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform and AWS CloudFormation.

• In-depth knowledge of web application security and perimeter defense technologies, including anti-bot solutions, SSL/TLS, HTTP security headers, and DNS security.

• Experience in securing CI/CD pipelines, integrating security testing tools, and leading secret management systems like AWS Secrets Manager or HashiCorp Vault.

• Solid understanding of secure coding practice