Senior App & Product Security Engineering Manager

The Blackstone Group L.P.; Bethpage (NY); On-site; USD 175,000 - 250,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Life insurance

401(k)

Discretionary bonus

Job summary

Blackstone is seeking a Security Engineering Manager to lead the Application Security program, overseeing a team of security engineers and partnering with Software, Platform, Cloud Infrastructure, and Security Operations teams. You will guide security reviews, risk assessments, and secure-by-design practices across the firm’s software delivery lifecycle.

The ideal candidate has 8+ years in application security and 3+ years in leadership, with deep knowledge of SDLC, threat modeling, and modern

Qualifications

• 8+ years in application security or related field.
• 3+ years leading security engineers or teams.
• Deep understanding of secure SDLC, threat modeling, and vulnerability management.
• Experience with cloud-native security, preferably AWS.
• Experience with security tooling including SAST, SCA, DAST, and secrets scanning.

Responsibilities

• Lead and manage Blackstone's Application Security team, mentoring engineers and overseeing performance.
• Own the Application Security program roadmap, strategy, and execution across software, cloud-native, and AI platforms.
• Oversee SDRs, TSRs, SCRs, vulnerability disclosure, penetration testing, and remediation programs.
• Partner with engineering to embed security controls and secure-by-design practices throughout the SDLC.
• Drive adoption of secure development practices (SAST, SCA, DAST, CI/CD security).
• Lead software supply chain security initiatives.
• Establish security standards and guardrails for cloud-native apps, AI-enabled systems, APIs, and platforms.
• Develop metrics and KPIs to demonstrate risk reduction and program effectiveness.
• Present findings and strategic recommendations to technology leadership and audit stakeholders.

Skills

Application security

Engineering leadership

Threat modeling

Secure SDLC

AWS security

CI/CD security

Kubernetes

SAST/SCA

Education

Bachelor’s degree in CS/Cybersecurity/Engineering

Tools

SAST

SCA

DAST

Secrets scanning

IaC tooling

Job description

Blackstone is seeking a Security Engineering Manager to lead the Application Security program, overseeing a team of security engineers and partnering with Software, Platform, Cloud Infrastructure, and Security Operations teams. You will guide security reviews, risk assessments, and secure-by-design practices across the firm’s software delivery lifecycle.

The ideal candidate has 8+ years in application security and 3+ years in leadership, with deep knowledge of SDLC, threat modeling, and modern