Application Security Engineering Manager, Platform Security - Seattle

At Qualtrics, we create software the world’s best brands use to deliver exceptional frontline experiences, build high-performing teams, and design products people love. But we are more than a platform—we are the creators and stewards of the Experience Management category serving over 18K clients globally. Building a category takes grit, determination, and a disdain for convention—but most of all it requires close-knit, high-functioning teams with an unwavering dedication to serving our customers.

When you join one of our teams, you’ll be part of a nimble group that’s empowered to set aggressive goals and move fast to achieve them. Strategic risks are encouraged and complex problems are solved together, by passing the mic and iterating until the best solution comes to light. You won’t have to look to find growth opportunities—ready or not, they’ll find you. From retail to government to healthcare, we’re on a mission to bring humanity, connection, and empathy back to business. Join over 6,000 people across the globe who think that’s work worth doing.   Application Security Engineering Manager, Platform Security - Seattle   Why We Have This Role   As Qualtrics continues to expand the Experience Management (XM) SaaS platform, we must ensure that we’re protecting our customers and their data by building and operating secure systems. With over one thousand software & system engineers contributing to Qualtrics XM every day, we have a large attack surface to evaluate and secure. This role is critical to this mission. Qualtrics is seeking an experienced security engineer with a passion for security and demonstrated leadership abilities to manage our Application Security team. The role may also have oversight of other related areas such as infrastructure and cloud security. This is a new role reporting to the head of platform security that includes a mix of people management, hiring, strategy, program operations and hands-on security engineering responsibilities.   The Application Security team is responsible for measures to improve and ensure the security of web & mobile applications, code and related components in Qualtrics SaaS products (including those of our acquired companies). The team owns secure development standards and training, security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and vulnerability disclosure programs. Application Security works in collaboration with other teams within the Information Security organization, including infrastructure and cloud security, vulnerability management, network security, security operations and incident response, and security assurance.     How You’ll Find Success

• You will define and drive improvements to the product and application security program; hire, mentor, and support a team of skilled security engineers; and work effectively with the Qualtrics engineering organization and fellow security team members to protect our customers and their data by building and operating secure systems.
• Experience with assessing/securing large, complex SaaS applications
• One or more relevant security certifications (CISSP, CISM, CEPT, CMWAPT, CPT, CEH, LPT, GWAPT, GPEN, GXPN, OSCP)
• Two or more years of experience as a people manager
• Use of agile methodologies for project management
• Manual web application penetration testing experience, including the use of professional penetration testing tools (e.g., Burp Suite)
• Strong familiarity with AWS, Docker, Kubernetes, Linux and similar infrastructure & technologies
• Experience securing iOS/Android mobile apps
• Prior full time software development experience is strongly preferred

  How You’ll Grow

• Exercise and grow your leadership skills by providing program strategy (e.g., defining what the future of our appsec program should look like), thought leadership (e.g., influencing others across the organization to adopt new solutions which solve security problems at scale), project & program leadership (e.g., getting critical initiatives to completion), people leadership (e.g., mentoring team members to help them also grow and take on new responsibilities)
• Continuous learning - you will have the opportunity to learn about the variety of modern technologies and frameworks being utilized or added to the Qualtrics application ecosystem so that you can ensure we are successfully applying securing them.

  Things You’ll Do

• Develop and execute the product & application security architecture and program strategy; align and communicate roadmaps with stakeholders
• Support and manage a team of security engineers through regular 1-on-1 sessions and team meetings, coaching, workload management and performance revie