Product Manager, App Security & Risk Adjudication

Bank of America; Denver (CO); Sur place; USD 135 000 - 217 000; Plein temps

Avantages offerts par ce poste

Paid time off

Résumé du poste

Bank of America is seeking a Product Manager – Tech Delivery with deep expertise in application security to partner with BISO, CIOs, CTOs and development teams. You will analyze code, architecture and risk across SDLC, driving secure delivery and resilient software outcomes.

You will independently validate findings from security tests, guide remediation, and ensure alignment with enterprise security standards. Strong communication with technical and non-technical stakeholders is essential.

Qualifications

• 10+ years of Information Security, Application Security, Secure Software Development, or Technology Risk Management experience.
• 5+ years in Application Security, Secure Software Development, Vulnerability Management, Security Architecture, or Information Security Risk Management.
• Strong experience performing source code analysis, vulnerability validation, application security assessments, and security testing.
• Subject matter expertise in Application Security, Secure SDLC, Vulnerability Management, Threat Modeling, Secure Coding Practices, OWASP Top 10, and CWE.
• Experience with Checkmarx One or comparable enterprise application security testing platforms.
• Ability to evaluate, validate, and adjudicate complex SAST, SCA, API Security, and related application security findings using risk-based analysis.
• Experience identifying false positives, exploitability constraints, compensating controls, and appropriate risk treatment strategies.
• Strong understanding of modern application architectures, APIs, microservices, cloud-native technologies, and DevSecOps practices.
• Strong knowledge of NIST, ISO, PCI DSS, and related security frameworks.
• Ability to communicate technical security findings to technical and non-technical stakeholders.

Responsabilités

• Possess a strong application security background with knowledge of SDLC, secure coding, and software architecture.
• Serve as technical reviewer and adjudicator for findings from Checkmarx One and other security testing tools.
• Review, analyze, validate, and disposition findings using evidence-based analysis.
• Independently validate vulnerability findings beyond automated scanners or prior dispositions.
• Analyze source code, APIs, data flows, and architecture to assess vulnerability validity and impact.
• Evaluate exploitability, reachability, attack paths, compensating controls, and risk.
• Review developer-submitted adjudication requests and supporting evidence.

Connaissances

Application Security

Threat Modeling

Vulnerability Management

Risk Assessment

DevSecOps

Communication

Security Architecture

Analytical Thinking

Formation

Bachelor’s or Master’s in CS/IT/Security

Outils

Checkmarx One

GitHub Copilot

Description du poste

Bank of America is seeking a Product Manager – Tech Delivery with deep expertise in application security to partner with BISO, CIOs, CTOs and development teams. You will analyze code, architecture and risk across SDLC, driving secure delivery and resilient software outcomes.

You will independently validate findings from security tests, guide remediation, and ensure alignment with enterprise security standards. Strong communication with technical and non-technical stakeholders is essential.