Engineering Manager, Application Security (36FEC7D)

Referment; New York (NY); On-site; USD 150,000 - 230,000; Full time

Job summary

Referment is seeking an engineering manager for application security in the United States. The role blends leadership with hands-on security engineering across consulting, tooling and secure product design.

You will shape how AI changes security review and enable scalable security engineering by balancing automation, guidance, and policy, while remaining hands-on with developer-facing tooling and secure design.

Qualifications

• Over a decade in security or software engineering with leadership in app/product security.
• Experience guiding static/dynamic analysis and automated security testing in workflows.
• Strong ability to integrate security into the SDLC with pragmatic trade-offs.

Responsibilities

• Lead a team delivering application-security consulting and product-security development.
• Collaborate with development teams on secure design, testing, implementation and review.
• Define strategy for scalable, automated app-security work as AI evolves.
• Maintain hands-on involvement with security tooling, automated testing and secure design.
• Align with senior technical stakeholders and partner functions.

Skills

Security leadership

Application security

Product security tooling

AI security

Developer tooling

Static analysis

Dynamic analysis

Secret scanning

Secure SDLC

Stakeholder management

Education

Bachelor's in CS or related field

Tools

Static analysis tools

Dynamic analysis tools

Secret scanning tools

AI security tooling

Job description

Referment is working with a global investment and technology business to appoint an engineering manager for application security. The role combines team leadership and hands-on engineering, spanning security consulting, developer tooling and secure product design.

You will help decide where the function creates the most leverage, balancing automation, consultation and policy while embedding security into development without becoming a bottleneck. A key part of the remit is shaping how AI changes security review and enables more scalable security engineering.

The Role

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

What We're Looking For

• At least ten years in security or software engineering, including several years leading application security, product security or developer-security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.