Product Manager - App Security & Risk Delivery

Bank of America

Denver (CO)

On-site

USD 140,000 - 190,000

Full time

8 days ago

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Bank of America is seeking a Product Manager – Tech Delivery within the BISO organization to drive secure software delivery across the SDLC. You will partner with CIOs, CTOs, and development teams to implement secure development practices and risk-based remediation.

You will review security findings from enterprise testing platforms, validate exploitability, and guide risk-informed outcomes. Strong communication with technical and non-technical stakeholders is essential.

Qualifications

10+ years in Information Security, Application Security, or Technology Risk Management.
5+ years in Application Security, secure software development, vulnerability management or risk management.
Strong source code analysis, vulnerability validation and security testing experience.
Expertise in secure SDLC, threat modeling, CWE/OWASP Top 10.
Experience with Checkmarx One or comparable platforms.
Ability to perform risk-based adjudication of SAST/SCA/API findings.

Responsibilities

Serve as the primary technical reviewer for application security findings from Checkmarx One.
Review, analyze, validate, and disposition findings with evidence-based analysis.
Independently validate vulnerability findings beyond automated scanners.
Analyze code, APIs, data flows and architectures to assess risk and impact.
Evaluate exploitability, attack paths, compensating controls, and risk.
Validate adjudication requests and supporting evidence packages.