Product Security Lead — Senior Manager, Secure-by-Design

Booz Allen Hamilton; Washington (District of Columbia); Hybrid; USD 143,000 - 266,000; Full time

Job summary

Booz Allen Hamilton is seeking a senior Product Security Manager to grow and mature the practice within the Commercial Team. You will define standards, collaborate with market and sales, and lead security programs across client projects.

This role requires driving security across the full product lifecycle and coordinating with stakeholders to ensure secure-by-design outcomes. You will hire and guide Product Security Engineers and Architects, perform security posture assessments, and deliver

Qualifications

• 10+ years leading teams in Product Security.
• 5+ years with application or product development and secure software solutions.
• 3+ years securing embedded systems, hardware environments.
• 1+ years with reverse engineering tools (Ghidra or IDA Pro).
• Experience across SDLC, vulnerability management, and modern tooling.
• Experience with code scanning tools and CI/CD pipelines.
• Knowledge of OWASP Top 10 and best practices.
• Ability to travel up to 30%.

Responsibilities

• Lead implementation, testing, hardening, and maturation of product security programs.
• Interview business and technology leaders to develop strategies and findings.
• Educate client software/engineering teams on cybersecurity best practices.
• Establish KPIs/KRIs for cybersecurity assurance across products.
• Lead, hire, and inspire Product Security Engineers and Architects.

Skills

Team leadership

Application security

Secure development

Embedded systems security

Reverse engineering tools

SDLC security

CI/CD security

OWASP Top 10

Vulnerability management

Penetration testing

Education

Bachelor's degree

Tools

Ghidra

IDA Pro

Job description

Booz Allen Hamilton is seeking a senior Product Security Manager to grow and mature the practice within the Commercial Team. You will define standards, collaborate with market and sales, and lead security programs across client projects.

This role requires driving security across the full product lifecycle and coordinating with stakeholders to ensure secure-by-design outcomes. You will hire and guide Product Security Engineers and Architects, perform security posture assessments, and deliver