Senior Manager, Application Security & Secure DevOps

Citizens; Johnston (RI); Hybrid; USD 133,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Retirement benefits

Education reimbursement

Wellness programs

Generous PTO

Job summary

Citizens is seeking a Manager of Application Security to lead and mature enterprise AppSec across a complex tech landscape. The role partners with engineering, cloud, DevOps, and risk teams to drive measurable risk reduction while maintaining delivery velocity.

You will define secure coding standards, oversee testing tool integration, and mentor security engineers, with governance to show maturity to senior leadership.

Qualifications

• 10+ years in cybersecurity focusing on application security.
• 5+ years leading an enterprise AppSec program.
• Deep knowledge of application security risks and OWASP Top 10.

Responsibilities

• Lead enterprise application security across web and mobile platforms.
• Define strategy, roadmap, and security standards aligned to risk.
• Embed secure coding practices into architecture and delivery.
• Oversee SAST/DAST/SCA integration into CI/CD pipelines.
• Guide risk-based remediation and threat-informed guidance.
• Collaborate with vulnerability management and cloud security teams.
• Establish governance, metrics, and reporting for AppSec maturity.
• Represent security in audits and regulatory engagements.
• Translate security risks into actionable business insights.
• Mentor and develop AppSec engineers; scale tooling & processes.

Skills

10+ years experience

People leadership

OWASP Top 10

SDLC / DevSecOps

AppSec tooling

Architecture assessment

Secure by design

Executive reporting

Stakeholder influence

Penetration testing / threat modeling

Education

Bachelor's degree in CS/Cybersecurity/IS

CISSP / CISM / CISA / GPEN

Tools

SAST

DAST

SCA

CI/CD tooling

Job description

Citizens is seeking a Manager of Application Security to lead and mature enterprise AppSec across a complex tech landscape. The role partners with engineering, cloud, DevOps, and risk teams to drive measurable risk reduction while maintaining delivery velocity.

You will define secure coding standards, oversee testing tool integration, and mentor security engineers, with governance to show maturity to senior leadership.