Manager, Application Security Engineering

About This Role

Lead and mentor a global team of application security engineers to develop and manage a scanning orchestration platform, efficiently identifying security vulnerabilities for Vanguard's applications. This role sets high-level strategy for scanning practices and plays a crucial part in integrating security into the Secure Software Development Lifecycle.

Responsibilities

• Set high-level strategy and direction for scanning orchestration and operational practices, establishing clear expectations, goals, and success metrics.
• Lead and mentor a global team of application security engineers to build and efficiently manage scanning orchestration platforms.
• Collaborate with development teams and stakeholders to integrate security tools, standards, and processes into the Secure Software Development Lifecycle (SSDLC).
• Implement and manage security tools within CI/CD pipelines to automate vulnerability detection and remediation.
• Define and implement strategy to achieve 100% application code scanning to detect security vulnerabilities.
• Act as an industry expert in application security engineering practices and standards, guiding the team to mature the Application Security program.
• Deploy application security tools, processes, and documentation to support alignment with OWASP Top 10, Industry Standards, Current Events, and Best-Practices.
• Develop and maintain a technical roadmap for security tooling and controls to stay ahead of evolving threats.
• Establish a governance framework to benchmark program maturity and team performance.
• Stay current on emerging threats, including adversarial ML risks, and lead knowledge-sharing sessions.

Requirements

• 7+ years of professional experience in Security Management, Application Security
• Proven people leadership experience in Application Security Engineering
• Hands-on experience with application development (Java, Python, etc.)
• Deep expertise in application security methodologies such as SAST, DAST, SCA

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field
• 7+ years of professional experience in Security Management, Application Security

Nice to Have

• Strong understanding of Secure SDLC, application security engineering, and AWS cloud
• Familiarity with industry frameworks: OWASP, NIST SSDF
• Certifications such as CISSP, CISM, CSSLP, or equivalent

Skills

* Required skills