Application Security TPM: Bug Bounty & API Security Lead

GSPANN Technologies, Inc

San Francisco (CA)

On-site

USD 124,000 - 207,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

GSPANN Technologies, Inc. in California seeks an Application Security Technical Program Manager (TPM) to own and drive vulnerability remediation programs, initially focusing on HackerOne bug bounty findings, API security, GraphQL authorization, and cross-functional remediation tracking.

The TPM will serve as the operational owner of the vulnerability remediation lifecycle, coordinating with Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation,

Qualifications

5+ years experience in: Software Engineering or Application Security.
Strong understanding of: REST APIs, GraphQL, Authentication & Authorization, OAuth, JWT, OWASP Top 10, API Security Top 10.
Experience reproducing security findings.
Experience using Postman.
Experience with Jira and ServiceNow.

Responsibilities

Own day-to-day management of the vulnerability remediation lifecycle, coordinating across Cybersecurity, Engineering, Product, and external vendors.
Bug Bounty Program Management: manage intake, triage, validation, routing, tracking, and closure; coordinate weekly operating reviews with HackerOne and internal stakeholders; track remediation commitments and drive accountability; manage disclosure and communication processes.