Senior Application Security Lead | Flexible SDLC & DevSecOps

Overstock.Com; United States; On-site; USD 150,000 - 185,000; Full time

Benefits offered by this job

401k (6% match)

Flexible schedules

Tuition reimbursement

Leadership development program

Mentorship program

Job summary

Bed Bath & Beyond is seeking an Application Security Manager to lead our security program across secure SDLC practices, vulnerability management, and developer partnerships. You will drive threat modeling, risk-based remediation, and security testing for web, mobile, and cloud applications.

The role requires hands‑on expertise in SAST/DAST/SCA, WAF/RASP, and CI/CD security, with a focus on reducing supply chain risk and delivering actionable remediation plans.

Qualifications

• Hands‑on experience with application security assessments and risk‑based remediation.
• Experience with threat modeling, secure SDLC, and vulnerability governance.
• Familiarity with security tooling: SAST/DAST/SCA, WAF, RASP, and cloud security posture.

Responsibilities

• Lead the Application Security team across secure SDLC enablement and vulnerability management.
• Oversee architecture/design reviews, threat modeling, code review, API security, and testing.
• Own vulnerability governance: intake, triage, SLA, remediation tracking, and leadership reporting.
• Manage vulnerability disclosure, bug bounty, and external findings processes.
• Partner with CI/CD, DevOps, SRE, Platform Engineering to embed security in delivery pipelines.
• Translate findings into remediation plans and maintain security requirements.
• Drive secure design/remediation for commerce platforms, APIs, and web/mobile apps.
• Identify and reduce software supply chain risk and dependency confusion risks.
• Support security incidents and postmortems related to applications.
• Create metrics/dashboards to show application security posture and enable developer training.

Skills

Threat modeling

Secure SDLC

DevSecOps

Vulnerability remediation

Education

Bachelor’s degree in Engineering, Information Systems, Computer Science or related field

OSCP / SANS/GIAC / CEH certifications

Tools

SAST

DAST

SCA

WAF/RASP

CI/CD tooling

Job description

Bed Bath & Beyond is seeking an Application Security Manager to lead our security program across secure SDLC practices, vulnerability management, and developer partnerships. You will drive threat modeling, risk-based remediation, and security testing for web, mobile, and cloud applications.

The role requires hands‑on expertise in SAST/DAST/SCA, WAF/RASP, and CI/CD security, with a focus on reducing supply chain risk and delivering actionable remediation plans.