Manager/Senior Manager, Delivery Management - Application Security (m/f/d)

EPAM; Berlin; Hybrid; EUR 120,000 - 160,000; Full time

Job summary

EPAM is seeking a Manager/Senior Manager, Delivery Management (m/f/d) - Application Security for hybrid work across Germany, the Netherlands or the UK. You will steer enterprise AppSec programs, integrate AI-augmented workflows and translate findings into executive reports to drive measurable risk reduction.

The role requires proven delivery leadership in cybersecurity, with a focus on AppSec, and familiarity with AI optimization.

Qualifications

• Proven track record in enterprise-scale delivery management or program leadership in cybersecurity, especially AppSec.
• Security certifications (CSSLP, CISM, CISSP or equivalent) are highly preferred.
• Experience or familiarity with AI optimization, agentic workflows, LLM integration or automated security pipelines.

Responsibilities

• Steer roadmap, milestones, governance, risks, impediments and financials of enterprise AppSec programs.
• Lead integration of agentic techniques and AI optimization into security processes for rapid remediation of high-risk findings.
• Establish governance for validation, deduplication and ranking of findings by exploitability, business context and impact.
• Translate AppSec metrics and risk reduction milestones into reporting for executives and portfolio leaders.

Skills

Delivery management

Program leadership

Cybersecurity

Application Security

Executive stakeholder management

AI optimization

Job description

Enterprise clients face mounting pressure to secure complex application portfolios against evolving threats and regulatory demands. This is the Manager/Senior Manager, Delivery Management (m/f/d) - Application Security role at EPAM in Germany, the Netherlands or the UK, working hybrid. You connect technical execution, business impact and human-led governance, steering the delivery of our AI-Native Cyber Resilience Program. The role anchors on integrating agentic workflows and AI optimization into established security processes, driving high-velocity remediation. You translate raw security findings into actionable reporting for executives, ensuring every engagement delivers measurable risk reduction. The work matters because resilient application security is critical to business continuity and trust in today's digital landscape.

Responsibilities

Responsibilities Steer the roadmap, milestones, governance model, risks and impediments, and financial performance of enterprise Application Security programs Lead the integration of agentic techniques and AI optimization into existing security processes to address high-risk findings at machine speed Establish and govern systems and processes that validate, deduplicate and rank security findings based on practical exploitability, business context and actual impact, driving the remediation of vulnerabilities at scale Establish clear evaluation criteria and actionable reporting, building an integrated overview of the security posture across an application portfolio Translate AppSec metrics, AI KPIs and risk reduction milestones into clear, actionable reporting for C-level executives and portfolio leaders

Requirements

• Proven track record in managing enterprise-scale delivery management or program leadership within cybersecurity, with a heavy emphasis on Application Security programs
• Industry-recognized security certification required, with a strong preference for CSSLP (Certified Secure Software Lifecycle Professional), CISM, CISSP or equivalent senior credentials
• Demonstrated experience or strong familiarity with AI optimization, agentic workflows, LLM integration or automated software/security pipelines
• Deep understanding of software development lifecycles, AppSec vulnerabilities, risk evaluation and quantification, executive stakeholder management
• Exceptional capability in governing cross-functional engineering teams, managing program financials and defining robust operational governance models