Senior Manager - Application Security & Secure SDLC

WeHireYou; New Amsterdam (IN); On-site; USD 150,000 - 190,000; Full time

Job summary

Miro is seeking a Senior Manager of Application Security to define and operationalize our application security strategy across the SDLC. You will lead a multidisciplinary team of engineers and offensive security specialists who partner with developers, product teams, and platform engineering globally.

You will embed security in all product lifecycle phases, from threat modeling to secure delivery pipelines and post‑release testing.

Qualifications

• 10+ years of experience in software, application, or product security.
• 3+ years of technical leadership or management experience in a security‑focused role.
• Extensive experience with threat modeling methodologies (e.g., STRIDE, PASTA) and risk assessment in a SaaS environment.
• Deep expertise in Secure Software Development Lifecycles (SSDLC) including agile development integration.
• Experience running Security Champions programs and scaling developer engagement.
• Experience leading offensive security programs (penetration testing, red teaming, bug bounty).
• Governance frameworks such as ISO 27001, SOC 2, OWASP SAMM knowledge.
• Familiarity with AI/LLM tooling and related security/governance considerations.
• Experience with AWS and securing API‑driven microservice architectures.
• Ability to manage distributed teams and communicate effectively with technical and business stakeholders.

Responsibilities

• Lead and mentor a globally distributed team of security engineers focused on application security, offensive testing, secure architecture, and vulnerability remediation.
• Coordinate the team's initiatives and provide project management leadership.
• Drive integration of security into the Discover, Define, Deliver lifecycle through the AMPed framework and Operating Model.
• Collaborate with Product, Engineering, and Design to ensure security is considered at ideation through threat modeling and risk reviews.
• Shape and evolve Secure SDLC practices, integrating security into CI/CD pipelines and infrastructure‑as‑code.

Skills

Security leadership

Threat modeling

SSDLC

Security champions

AWS security

Communication

AI/LLM tooling

Security governance

Tools

Cursor

GitHub Copilot

Job description

Miro is seeking a Senior Manager of Application Security to define and operationalize our application security strategy across the SDLC. You will lead a multidisciplinary team of engineers and offensive security specialists who partner with developers, product teams, and platform engineering globally.

You will embed security in all product lifecycle phases, from threat modeling to secure delivery pipelines and post‑release testing.