Note: The job is a remote job and is open to candidates in USA. Prosper is an innovative FinTech company focused on improving customers’ financial well-being through digital personal finance products. The Application Security Senior Manager will lead the Application Security program by defining its strategy, implementing and optimizing security controls, guiding AI security architecture, and partnering with technology and product teams. The role also manages a small AppSec engineering team while remaining hands-on with security engineering, vulnerability management, incident response, and technical execution.
Responsibilities
- **Program Leadership:** Define and execute a multi-year Application Security roadmap aligned with business goals and industry best practices
- **AI Security Leadership:** Help define the secure architecture and guardrail framework for AI adoption across the company
- **Security Engineering & Automation:** Integrate threat modeling, security tools & testing (SAST, SCA, DAST, IAST, RASP, etc.), and secure by design processes into the SDLC (CI/CD pipeline)
- **Architecture Reviews & Technical Execution:** Perform security architecture reviews for major product changes; **conduct in-house secure code reviews and threat modeling for high-impact features and critical products.**
- **Vulnerability Management:** Oversee the end-to-end AppSec vulnerability lifecycle (identification, prioritization, and remediation based on business risk, exploitability, and threat intelligence)
- **Incident Response:** Direct and manage incident response for application security alerts/incidents
- **Offensive Security & Testing:** Lead the strategy for third party penetration tests
- **Reporting & Metrics:** Deliver executive-level dashboards and reports on application security posture and risk trends
- **Continuous Improvement:** Drive continuous improvement activities, and deepen leadership awareness of product and application security risks
- **Strategic Partnership & Collaboration:** Collaborate with Engineering and Product leads to embed security into the SDLC and scale the Security Champions program
- **Team Leadership:** Direct a small team of AppSec engineers while remaining **deeply hands-on** in technical execution
Skills
- - 10+ years of progressive application security experience (prior software development experience preferred)
- - Ability to lead, manage, and develop a technical Application Security Engineering team
- - Great interpersonal skills, ability to foster constructive dialogue
- - Deep technical knowledge with a track record of successful execution in application security (secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
- - Strong knowledge of CI/CD pipelines, cloud-native security (GCP), and container security
- - Bachelor's degree in Computer Science or a related field, or its equivalent in work experience
- - Strong working knowledge of at least two programming or scripting languages
- Prior software development experience
Benefits
- Remote work flexibility, including fully remote work, with digital-first tools and an intentional culture to keep team members synced and supported
- A 401(k) with a 5% company match
- Flexible time off
- Paid parental leave
- An annual wellness allowance
- Comprehensive health coverage
- Udemy access
- Childcare assistance
- Pet insurance
- Additional savings through Beneplace
Company Overview
Company H1B Sponsorship