Senior Product Security Leader (AppSec & InfraSec)

Anaplan; Greater London; On-site; GBP 120,000 - 170,000; Full time

Job summary

Anaplan seeks a Senior Manager to lead its Product Security team across AppSec, InfraSec, OffSec and vulnerability management, reporting to the Director of Product Security and being accountable for turning strategy into measurable security outcomes across the portfolio.

You will own the operating rhythm, hire and develop engineers, drive threat modelling and security tooling, and partner with engineering and platform leadership to reduce risk at scale.

Qualifications

• Experience leading a product/security team with hiring and performance management.
• Broad technical grounding across at least two areas: App security, cloud/infrastructure security, offensive security, or vulnerability management.
• Hands-on secure SDLC experience: threat modelling, design reviews, security tooling in CI/CD.
• Ability to prioritize high-impact risk reduction over compliance.
• Experience building cross-functional partnerships with engineering, product, and platform teams.
• Clear, direct communication to senior leadership without jargon.
• Comfort in a product-led engineering environment valuing security credibility.

Responsibilities

• Lead and develop the Product Security team across AppSec, InfraSec, OffSec and vulnerability management.
• Spearhead sprint planning, triage, and retrospectives; balance BAU and strategic projects.
• Integrate threat modelling and secure tooling into the SDLC.
• Translate scanner outputs and threat intel into prioritized remediation plans.
• Scale security through automation and self-service tooling.

Skills

Team leadership

App security

Cloud security

Vulnerability management

Threat modelling

Security tooling

CI/CD security

Communication

Job description

Anaplan seeks a Senior Manager to lead its Product Security team across AppSec, InfraSec, OffSec and vulnerability management, reporting to the Director of Product Security and being accountable for turning strategy into measurable security outcomes across the portfolio.

You will own the operating rhythm, hire and develop engineers, drive threat modelling and security tooling, and partner with engineering and platform leadership to reduce risk at scale.