AppSec Product Manager: Strategy, Risk & AI Security

Capital One; Chicago (IL); On-site; USD 209,000 - 239,000; Full time

Job summary

Capital One is seeking a Senior Manager, Cyber Security Product Manager for AppSec to lead the multi-year AppSec roadmap in a large enterprise. You will partner with Security Engineering Enablement and Architecture to translate security needs into scalable, developer-friendly workflows and drive ROI on toolsets.

You will evaluate security tools (SAST/DAST/SCA), define AI-augmented development strategies, and ensure governance around vulnerability disposition with clear SLAs and audit trails.

Qualifications

• Bachelor's Degree required.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years evaluating, contributing to, or supporting development of cybersecurity capabilities.
• At least 3 years of application security experience.

Responsibilities

• Own the multi-year AppSec product roadmap aligned with risk appetites.
• Serve as liaison to Security Engineering Enablement and Architecture to translate security needs into scalable workflows.
• Lead strategic evaluation of AppSec tools (SAST/DAST/SCA) to maximize ROI.
• Define product strategy for AI-application security and secure SDLC integration.
• Evangelize the AppSec mission through forums and executive briefings.
• Establish governance for vulnerability disposition with SLAs and audit trails.

Skills

Stakeholder management

Threat intelligence

Cybersecurity metrics

People management

Cloud-native environments

OWASP Top 10

AppSec / Software security

Education

Bachelor's Degree

Job description

Capital One is seeking a Senior Manager, Cyber Security Product Manager for AppSec to lead the multi-year AppSec roadmap in a large enterprise. You will partner with Security Engineering Enablement and Architecture to translate security needs into scalable, developer-friendly workflows and drive ROI on toolsets.

You will evaluate security tools (SAST/DAST/SCA), define AI-augmented development strategies, and ensure governance around vulnerability disposition with clear SLAs and audit trails.