Engineering Manager, Application Security (636FEC7)

Referment; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Referment is seeking an engineering manager for application security, blending team leadership with hands-on security engineering across consulting, tooling, and secure product design. The role emphasizes shaping scalable, automated security work as AI capabilities evolve.

You will guide a team, partner with development groups on secure design and testing, and influence senior stakeholders while maintaining hands-on involvement in security tooling and testing within developer workflows.

Qualifications

• Ten years or more in security or software engineering, with several years in leading application or product security.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgment about integrating security into the software development lifecycle.
• Ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Knowledge of AI security, including agentic-application risks and agentic security tooling.

Responsibilities

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

Skills

Security leadership

Application security

Developer tooling

AI security

Tools

Static analysis

Dynamic analysis

Secret scanning

Automated security testing

Job description

Referment is working with a global investment and technology business to appoint an engineering manager for application security. The role combines team leadership and hands-on engineering, spanning security consulting, developer tooling and secure product design.

You will help decide where the function creates the most leverage, balancing automation, consultation and policy while embedding security into development without becoming a bottleneck. A key part of the remit is shaping how AI changes security review and enables more scalable security engineering.

The Role

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

What We're Looking For

• At least ten years in security or software engineering, including several years leading application security, product security or developer-security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.

This could suit an application-security leader who wants to combine management, strategy and substantial technical involvement.

#Referment