Application Security Program Manager

GSPANN Technologies, Inc; San Francisco (CA); On-site; USD 124,000 - 207,000; Full time

Job summary

GSPANN Technologies, Inc. in California seeks an Application Security Technical Program Manager (TPM) to own and drive vulnerability remediation programs, initially focusing on HackerOne bug bounty findings, API security, GraphQL authorization, and cross-functional remediation tracking.

The TPM will serve as the operational owner of the vulnerability remediation lifecycle, coordinating with Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation,

Qualifications

• 5+ years experience in: Software Engineering or Application Security.
• Strong understanding of: REST APIs, GraphQL, Authentication & Authorization, OAuth, JWT, OWASP Top 10, API Security Top 10.
• Experience reproducing security findings.
• Experience using Postman.
• Experience with Jira and ServiceNow.

Responsibilities

• Own day-to-day management of the vulnerability remediation lifecycle, coordinating across Cybersecurity, Engineering, Product, and external vendors.
• Bug Bounty Program Management: manage intake, triage, validation, routing, tracking, and closure; coordinate weekly operating reviews with HackerOne and internal stakeholders; track remediation commitments and drive accountability; manage disclosure and communication processes.

Skills

REST APIs

GraphQL

Authentication & Authorization

OAuth

JWT

OWASP Top 10

Bug bounty experience

Postman

Jira

ServiceNow

Tools

Postman

Jira

ServiceNow

HackerOne

Job description

Headquartered in California, U.S.A., GSPANN provides consulting and IT services to global clients. We help clients transform how they deliver business value by helping them optimize their IT capabilities, practices, and operations with our experience in retail, high-technology, and manufacturing. With five global delivery centers and 1900+ employees, we provide the intimacy of a boutique consultancy with the capabilities of a large IT services firm.

Role: Application Security Technical Program Manager (TPM).

Type: 12-24 months

Client’s Cybersecurity Team is seeking a highly technical contractor to own and drive application security vulnerability remediation programs, with an initial focus on HackerOne bug bounty findings, API security vulnerabilities, GraphQL authorization issues, and cross-functional remediation tracking.

The role will serve as the operational owner of the vulnerability remediation lifecycle, coordinating across Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation, assignment, remediation, and closure of security findings.

Bug Bounty Program Management

• Own day-to-day management of the HackerOne program.
• Manage vulnerability intake, triage, validation, routing, tracking, and closure.
• Coordinate weekly operating reviews with HackerOne and internal stakeholders.
• Track remediation commitments and drive accountability.
• Manage disclosure and communication processes.

Required Qualifications

Must Have:

• 5+ years experience in: Software Engineering or Application Security
• Strong understanding of: REST APIs, GraphQL, Authentication & Authorization, OAuth, JWT, OWASP Top 10, API Security Top 10.
• Experience reproducing security findings.
• Experience using Postman.
• Experience with Jira and ServiceNow.

Preferred

• HackerOne or Bug Bounty experience.
• Penetration testing experience.

Working at GSPANN

GSPANN is a diverse, prosperous, and rewarding place to work. We provide competitive benefits, educational assistance, and career growth opportunities to our employees. Every employee is valued for their talent and contribution. Working with us will give you an opportunity to work globally with some of the best brands in the industry.

The company does and will take affirmative action to employ and advance in the employment of individuals with disabilities and protected veterans and to treat qualified individuals without discrimination based on their physical or mental disability status. GSPANN is an equal opportunity employer for minorities/females/veterans/disabled.