Senior Manager, Application and Pipeline Security

This is a fully remote position, open to applicants in Mexico, +1 more country.

📋 Description

• Lead and guide a high-performing Application Security engineering team.

• Align team initiatives with organizational objectives and operational hurdles.

• Propel Application and Pipeline Security strategy towards a self-sufficient, AI-driven DevSecOps model.

• Set architectural guardrails and validation standards for secure AI-assisted development processes.

• Collaborate with Platform Engineering on establishing cloud security baselines and Policy-as-Code guardrails.

• Supervise application penetration testing, prioritize findings, integrate them into pipeline guardrails, and ensure remediation within service level agreements.

• Create observability, regulatory standards, SBOM safeguards, CI/CD security gates, and risk-approval protocols.

• Prioritize and address security vulnerabilities across application environments and cloud infrastructures.

• Adjust SAST, DAST, SCA, and IaC scanning telemetry to minimize false positives.

• Develop AWS automated response triggers for swift isolation and runtime threat management.

• Incorporate security into integrated development environments (IDEs) and CI/CD pipelines.

• Define and report on performance metrics such as Mean Time to Recover (MTTR) and Auto-Fix Acceptance Rates.

• Formulate policies, ensure compliance, and modify departmental plans in response to operational challenges.

• Offer subject matter expertise to employees, peers, and clients.

⛳️ Requirements

• A minimum of 5-8 years of experience in specialized roles within Application Security or Cloud Engineering.

• At least 3 years in a management or leadership position.

• Expertise in designing AWS security governance and implementing automated incident response within extensive cloud ecosystems.

• Technical proficiency in CI/CD orchestration, containerization safeguards, and SAST/DAST/SCA integrations.

• Advanced skills in automation and the capability to architect security tools.

• Knowledge of AI-enhanced security technologies, including LLM-driven remediation tools and automated code-fixing platforms.

• Bachelor’s degree in a technical discipline such as Computer Science or Cybersecurity, or a comparable professional background.

• Significant professional experience as a Staff or Principal Software Engineer, or DevOps Specialist, prior to transitioning into security management.

• Proven history of collaboration with software engineering and platform teams.

• AWS Certified Security – Specialty or AWS Solutions Architect – Professional certifications.

• Bachelor’s degree or equivalent experience.

🏝️ Benefits

• Comprehensive health and wellness plans.

• 401(k) plan with a Nielsen company match.

• Generous paid time off policy.

• Company-provided vehicle (depending on the role).

• Discretionary incentive/bonus eligibility (depending on the role).

• Potential for bonuses, equity, or other incentives.