Remote Senior Manager, AI‑First Application Security

Jobgether; United States; Remote; USD 177,000 - 240,000; Full time

Benefits offered by this job

Fully remote work environment

Autonomy to shape security program

Direct access to engineering leaders

Executive collaboration with IT &:

AI-first security practices

Inclusive and collaborative culture

Job summary

Jobgether is seeking a Senior Manager, Application Security to lead the formation of a dedicated application security function in a fully remote tech environment in the United States. This senior leadership role combines hands-on security with people management, strategic planning, and cross-functional collaboration to embed secure development practices.

You will set security standards, strengthen vulnerability management, and guide AI-first security initiatives while coordinating with IT,

Qualifications

• At least 7 years of security experience, including substantial hands-on application security experience.
• Demonstrated success building or significantly maturing an application security program, including security reviews, threat modeling, vulnerability management, and penetration testing follow-up.
• Strong knowledge of secure software design, OWASP principles, common application vulnerabilities, and practical exploitation scenarios.
• Ability to read and understand application code, evaluate modern web and API architectures, and collaborate directly with engineers on remediation.
• At least 2 years of people management experience, including providing direction, coaching, and prioritization to practitioners with specialized expertise.
• Experience leading security initiatives while remaining technically hands-on rather than moving entirely into administrative management.
• Regular use of AI agents and AI-assisted development or security tools, with an understanding of how AI-generated code and automated security workflows affect application security practices.
• Ability to evaluate AI-assisted code analysis, vulnerability triage, automated remediation, and security testing, including determining which activities can be safely automated and how results should be validated.
• Strong strategic communication skills, with the ability to explain security posture, risk, and technical tradeoffs to senior leaders, engineers, customers, and other nontechnical stakeholders.
• Ability to learn unfamiliar domains quickly, ask effective questions, and make informed prioritization decisions across application security, IT, and compliance.
• A collaborative leadership style that empowers experienced team members, avoids unnecessary micromanagement, and builds alignment across engineering and business functions.

Responsibilities

• Define and own the application security roadmap, including vulnerability management, threat modeling, security reviews, and remediation processes for new features and architectural changes.
• Conduct hands‑on security reviews, triage vulnerabilities, collaborate with engineers on remediation, and progressively develop processes that allow the application security program to scale.
• Embed security‑by‑default practices throughout the software development lifecycle, including secure development standards, dependency management, secrets hygiene, and automated security scanning integrated into CI/CD pipelines.
• Design and implement an AI‑first application security strategy, evaluating AI‑assisted code analysis, vulnerability triage, remediation agents, and automated testing while establishing appropriate validation and oversight.
• Partner with engineering teams to ensure security practices strengthen development capabilities rather than create unnecessary delivery bottlenecks.
• Oversee third‑party and vendor security assessments, ensuring external providers meet appropriate security standards when handling sensitive customer information.
• Establish zero‑trust security principles and collaborate with cloud platform leadership on network security, identity and access management, security logging, and alerting.
• Lead application‑layer security incident response and coordinate with infrastructure teams on incidents involving cloud platforms or underlying systems.
• Manage and support the Compliance Lead and IT team, providing strategic direction, prioritization, organizational context, and professional development while respecting their operational expertise.
• Align application security, IT operations, and compliance under a unified strategy with shared standards, risk frameworks, and coordinated roadmaps.
• Oversee cross‑functional priorities involving access reviews, identity governance, endpoint security, employee onboarding and offboarding, and the connection between application security controls and compliance evidence.
• Partner with compliance leadership to assess future frameworks and enterprise requirements, prioritize IT investments, and support continued compliance maturity beyond existing SOC 2 Type II certification.
• Represent security posture, compliance status, and IT health to engineering leadership, enterprise customers, prospects, and auditors.
• Own the security questionnaire and due diligence process, communicating technical controls, risk assessments, and remediation plans clearly to external stakeholders.
• Provide leadership with actionable recommendations on security risks, compliance priorities, and operational improvements rather than routine status updates.

Job description

Jobgether is seeking a Senior Manager, Application Security to lead the formation of a dedicated application security function in a fully remote tech environment in the United States. This senior leadership role combines hands-on security with people management, strategic planning, and cross-functional collaboration to embed secure development practices.

You will set security standards, strengthen vulnerability management, and guide AI-first security initiatives while coordinating with IT,