Application Security Leader - SDLC & Risk Strategy (Hybrid)

Citizens Bank; Olympia (WA); Hybrid; USD 133,000 - 190,000; Full time

Job summary

Citizens Bank in the United States is seeking a Manager, Application Security to lead, scale, and mature our enterprise AppSec program across web and mobile platforms.

This role partners with engineering, cloud, DevOps, risk, and product teams to embed secure software development practices into the SDLC, balancing risk with delivery.

Hybrid work requires 4 days on site and 1 remote in one of the hubs: Johnston RI, Boston MA, Manchester NH.

Qualifications

• 10+ years in cybersecurity focused on application security.
• 5+ years leading an enterprise AppSec program.
• Deep knowledge of OWASP Top 10.
• Hands-on SDLC, CI/CD, DevSecOps experience.
• Experience with AppSec testing tools and processes.
• Ability to assess architecture and auth models.
• Strong collaboration with engineering and risk teams.
• Excellent written and verbal communication; executive reporting.
• Proven ability to influence stakeholders.

Responsibilities

• Lead the enterprise application security program across web and mobile.
• Define and execute vision, strategy, and roadmap for AppSec.
• Establish and enforce app security standards and secure coding.
• Embed security into architecture, design, and delivery decisions.
• Integrate SAST, DAST, and SCA into CI/CD pipelines.
• Lead app security assessments and remediation planning.
• Provide threat-informed guidance to engineering teams.
• Collaborate with vulnerability, cloud, and infra teams.
• Establish governance, metrics, and reporting on AppSec maturity.
• Represent AppSec in audits and risk engagements.
• Translate security risks into business insights for leaders.
• Build and mentor AppSec engineers.
• Improve tooling and processes to scale AppSec.

Skills

Application security leadership

Executive reporting

Secure SDLC / DevSecOps

CI/CD tooling integration

Threat modeling

Vulnerability remediation

Stakeholder influence

Security architecture review

Education

Bachelor's degree in CS, Cybersecurity, IS, or related field

CISSP / CISM / CISA / GPEN or equivalent

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Citizens Bank in the United States is seeking a Manager, Application Security to lead, scale, and mature our enterprise AppSec program across web and mobile platforms.

This role partners with engineering, cloud, DevOps, risk, and product teams to embed secure software development practices into the SDLC, balancing risk with delivery.

Hybrid work requires 4 days on site and 1 remote in one of the hubs: Johnston RI, Boston MA, Manchester NH.