Engineering Manager, Application Security (36FEC7D)

Referment; New York (NY); On-site; USD 180,000 - 250,000; Full time

Job summary

Referment is seeking an engineering manager for application security to lead a team delivering security consulting and product-security development. The role blends management with hands-on work across secure tooling, design, and testing.

You will partner with development teams to embed security into the software lifecycle, shape scalable security practices, and guide AI-enabled security review as the function evolves.

Qualifications

• Ten years or more in security or software engineering, with leadership in application security or developer-security tooling.
• Experience guiding security testing within developer workflows.
• Ability to influence senior technical stakeholders and balance pragmatic trade-offs.

Responsibilities

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure design.
• Build alignment with senior technical stakeholders and partner functions.

Skills

Security leadership

Stakeholder influence

AI security knowledge

Development security tooling

Tools

Static analysis

Dynamic analysis

Secret scanning

Automated security testing tooling

Job description

Referment is working with a global investment and technology business to appoint an engineering manager for application security. The role combines team leadership and hands‑on engineering, spanning security consulting, developer tooling and secure product design.

You will help decide where the function creates the most leverage, balancing automation, consultation and policy while embedding security into development without becoming a bottleneck. A key part of the remit is shaping how AI changes security review and enables more scalable security engineering.

The Role

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands‑on across developer‑facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

What We’re Looking For

• At least ten years in security or software engineering, including several years leading application security, product security or developer‑security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.

This could suit an application-security leader who wants to combine management, strategy and substantial technical involvement.

Referment