Engineering Manager, Application Security (4283E05)

Referment; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Referment is seeking an engineering manager for application security to lead a team responsible for application-security consulting and product-security development. You will partner with development teams on secure design, testing and review, while setting strategy for scalable, automated security work as AI capabilities evolve.

The role combines hands-on security tooling and design with leadership, aiming to embed security into the software development lifecycle and influence senior

Qualifications

• At least ten years in security or software engineering, including several years leading application security, product security or developer-security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.

Responsibilities

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

Skills

Team leadership

Security engineering

Application security

Developer tooling

Secure product design

Tools

Static analysis tooling

Dynamic analysis tooling

Secret scanning

Automated security testing

Job description

Referment is working with a global investment and technology business to appoint an engineering manager for application security. The role combines team leadership and hands‑on engineering, spanning security consulting, developer tooling and secure product design.

You will help decide where the function creates the most leverage, balancing automation, consultation and policy while embedding security into development without becoming a bottleneck. A key part of the remit is shaping how AI changes security review and enables more scalable security engineering.

The Role

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands‑on across developer‑facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

What We’re Looking For

• At least ten years in security or software engineering, including several years leading application security, product security or developer‑security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.

This could suit an application-security leader who wants to combine management, strategy and substantial technical involvement.

Referment