Product Security & Trust Engineering Manager

Threat X, Inc.; San Jose (CA); On-site; USD 162,000 - 198,000; Full time

Job summary

A10 Networks in San Jose, CA is seeking a Manager, Product Security and Trust to lead the security testing program across all products, embedding SAST/DAST/SCA into the development pipeline. You will champion AI security testing, SBOM practices, and regulatory compliance while partnering with Product, IT, and Legal to build customer trust.

Reporting to the CISO, you will transform security testing into automated, measurable engineering practice and ensure security posture is verifiable by

Qualifications

• 7+ years in product security or a closely related cybersecurity discipline, including 2+ years leading a team or owning a program end to end
• Hands-on depth with application security testing tooling and the practical realities of running it at scale — tuning, triage, false positive management, and developer adoption
• Demonstrated experience integrating security testing into CI/CD pipelines and automating security workflows
• Working knowledge of software supply chain security, including SBOM generation, open source license and vulnerability management, and dependency risk
• Experience with security compliance frameworks and audit processes, and with producing evidence that withstands external scrutiny
• Strong written communication skills, with the ability to produce customer-facing security documentation that is accurate and defensible
• Bachelor's degree in Computer Science, Information Security, a related field, or equivalent practical experience

Responsibilities

• Own and mature application security testing capabilities across the portfolio, including SAST, DAST, SCA, software composition and license analysis, secrets detection, container and image scanning, and fuzzing
• Partner with engineering leaders to integrate security testing directly into CI/CD pipelines, define build and release gates, and drive findings to closure with clear ownership, SLAs, and escalation paths
• Build and extend security testing capabilities for AI and ML components — model and dependency scanning, adversarial and prompt injection testing, agentic workflow abuse cases, and evaluation of AI-specific attack surface as A10 expands its AI security portfolio
• Reduce toil through automation: tune tooling to suppress false positives, automate triage and ticket routing, generate SBOMs as part of the build, and instrument the program with metrics leadership can act on
• Track emerging threats, vulnerability classes, and offensive research relevant to network, application delivery, and AI infrastructure, and translate them into testing coverage before they reach our customers
• Coordinate third-party penetration testing and interlock with PSIRT and the Emberstrike team so external findings, internal red team results, and pipeline findings feed a single remediation backlog
• Partner with Product Management to identify, scope, and execute product security compliance initiatives that unlock revenue and satisfy customer and regulatory requirements
• Drive certification and conformance efforts across the portfolio, working with engineering and third-party labs to plan evidence, remediation, and timelines against product release schedules
• Translate emerging regulatory requirements — secure-by-design expectations, SBOM and supply chain mandates, and regional product security regulation — into concrete engineering requirements and roadmap inputs
• Represent product security requirements in the NPI process and product governance forums, ensuring security is a defined gate rather than a late-stage discovery
• Work with IT and Cybersecurity teams to complete and maintain A10's internal cybersecurity compliance programs, including control ownership, evidence collection, audit readiness, and remediation tracking
• Serve as a primary responder for customer and prospect inquiries into A10's security posture — security questionnaires, RFP and RFI security sections, audit requests, and contractual security terms — in partnership with Sales, Legal, and Cybersecurity
• Build reusable trust artifacts that scale ahead of demand: standard questionnaire responses, security whitepapers, architecture and data flow documentation, and customer-facing posture summaries
• Participate in customer and partner security briefings as a credible technical voice on how A10 builds, tests, and secures its products
• Lead, mentor, and grow a small team of product security engineers, setting technical direction and holding a high bar for engineering rigor
• Build durable working relationships across engineering, product, IT, and cybersecurity, influencing outcomes in teams that do not report to this role
• Communicate risk clearly and without drama to audiences ranging from individual engineers to executive leadership and customers

Skills

Application security testing

CI/CD integration

SBOM generation

Security compliance

AI/ML security testing

Team leadership

Vulnerability management

Education

Bachelor's degree in Computer Science, Information Security, or related field

Job description

A10 Networks in San Jose, CA is seeking a Manager, Product Security and Trust to lead the security testing program across all products, embedding SAST/DAST/SCA into the development pipeline. You will champion AI security testing, SBOM practices, and regulatory compliance while partnering with Product, IT, and Legal to build customer trust.

Reporting to the CISO, you will transform security testing into automated, measurable engineering practice and ensure security posture is verifiable by