Senior Product Manager — Secure SDLC & App Security

Koitecc Solutions; Chicago, Northern (IL, KY); On-site; USD 135,000 - 217,000; Full time

Job summary

Bank of America is seeking a Product Manager - Tech Delivery to support BISO partnerships, review security findings, and drive secure software delivery across the SDLC. You will collaborate with CIOs, architects, developers, and risk teams to prioritize critical security priorities and enable secure development.

The role requires deep knowledge of secure SDLC, threat modeling, and modern architectures, with a focus on actionable risk decisions and communication across technical and non-technical

Qualifications

• 10+ years of Information Security, Application Security, Secure Software Development, or Technology Risk Management experience.
• 5+ years of Application Security, Secure Software Development, Vulnerability Management, Security Architecture, or Information Security Risk Management.
• Strong experience performing source code analysis, vulnerability validation, and security assessments.
• Subject matter expertise in Application Security, Secure SDLC, Vulnerability Management, Threat Modeling, CWE/OWASP.
• Experience with Checkmarx One or comparable platforms.
• Ability to evaluate complex SAST, SCA, API Security findings using risk-based analysis.
• Experience identifying false positives and appropriate risk treatment strategies.
• Strong understanding of modern architectures, APIs, cloud-native tech, and DevSecOps.
• Knowledge of NIST, ISO, PCI DSS and related frameworks.
• Ability to communicate security findings to technical and non-technical stakeholders.
• Strong analytical and risk assessment skills.

Responsibilities

• Possess a strong application security background with SDLC and secure coding practices.
• Serve as the primary technical reviewer and adjudicator for findings from Checkmarx One and other tools.
• Review, analyze, validate, and disposition application security findings with evidence-based analysis.
• Independently validate vulnerability findings beyond automated scanners or old dispositions.
• Analyze source code, APIs, data flows, and architecture for vulnerability impact.
• Evaluate exploitability, attack paths, compensating controls, and risk exposure.
• Review and validate developer adjudication requests and supporting evidence packages.

Skills

Financial Management

Influence

Solution Delivery Process

Stakeholder Management

Technical Strategy Development

Agile Practices

Analytical Thinking

Collaboration

Result Orientation

Risk Management

Business Acumen

Business Case Analysis

Data Management

Solution Design

Vendor Management

Education

Bachelor's and/or Master's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field

CISSP, CSSLP, CISM, CRISC, GIAC, OSCP, or equivalent certifications

Tools

Checkmarx One

GitHub Copilot

Job description

Bank of America is seeking a Product Manager - Tech Delivery to support BISO partnerships, review security findings, and drive secure software delivery across the SDLC. You will collaborate with CIOs, architects, developers, and risk teams to prioritize critical security priorities and enable secure development.

The role requires deep knowledge of secure SDLC, threat modeling, and modern architectures, with a focus on actionable risk decisions and communication across technical and non-technical