Engineering Manager, Application Security (A636FEC)

Referment; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Referment is seeking an Engineering Manager for Application Security in New York. You will lead a team blending security consulting, product-security development and developer tooling while embedding security across the SDLC.

You will shape scalable security work as AI capabilities evolve, stay hands-on with tooling and secure design, and influence senior technical stakeholders across the business. This is a leadership role for a technically hands-on security leader.

Qualifications

• At least ten years in security or software engineering with leadership in app/product security.
• Experience guiding static/dynamic analysis or automated security testing in dev workflows.
• Sound judgement embedding security in the software development lifecycle.
• Ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Knowledge of AI security and agentic security tooling.

Responsibilities

• Manage and guide a team responsible for app-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated app-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure design.
• Build alignment with senior technical stakeholders and partner functions.

Skills

Security leadership

Application security

Dev security tooling

AI security awareness

Stakeholder influence

Job description

Referment is working with a global investment and technology business to appoint an engineering manager for application security. The role combines team leadership and hands-on engineering, spanning security consulting, developer tooling and secure product design.

You will help decide where the function creates the most leverage, balancing automation, consultation and policy while embedding security into development without becoming a bottleneck. A key part of the remit is shaping how AI changes security review and enables more scalable security engineering.

The Role

• Manage and guide a team responsible for application-security consulting and product-security development.
• Partner with development teams on secure design, testing, implementation and review.
• Set strategy for scalable, automated application-security work as AI capabilities evolve.
• Remain hands-on across developer-facing security tooling, automated testing and secure application design.
• Build alignment with senior technical stakeholders and partner functions.

What We're Looking For

• At least ten years in security or software engineering, including several years leading application security, product security or developer-security tooling.
• Experience building or guiding static analysis, dynamic analysis, secret scanning or automated security testing within developer workflows.
• Sound judgement about integrating security into the software-development lifecycle.
• The ability to influence senior technical stakeholders and make pragmatic trade-offs.
• Working knowledge of AI security, including agentic-application risks and agentic security tooling.

This could suit an application-security leader who wants to combine management, strategy and substantial technical involvement.

#Referment