Senior Product Security Lead, Cloud & Apps

symplr; United States; On-site; USD 120,000 - 140,000; Full time

Job summary

symplr is seeking a Product Security Manager to drive security across enterprise software products from development through deployment and maintenance. You will define security requirements, perform threat modeling, and lead vulnerability management with cross‑functional teams to embed security in CI/CD pipelines.

The role emphasizes incident response readiness and ongoing security improvements. Ideal candidates have 4–5+ years of security experience, CISSP/CSSLP/CISM/CCSP are a plus, and strong

Qualifications

• University degree in Information Security, Computer Science, Computer Engineering, Information Technology (or equivalent).
• 4–5 years of relevant corporate information security industry experience.
• Certifications such as CISSP, CSSLP, CISM, CCSP are a plus.
• Knowledge of cybersecurity frameworks and regulatory requirements (HIPAA, NIST, ISO/IEC 27001).
• Experience with threat modeling, risk assessment, and security lifecycle management.

Responsibilities

• Define and enforce security requirements for software products and features throughout the lifecycle.
• Perform threat modeling, privacy impact assessments, SAST/DAST, and third‑party penetration testing.
• Identify, assess, and prioritize product security risks and vulnerabilities.
• Collaborate across teams to embed security tooling in CI/CD and shift‑left security.
• Lead WAF deployments and adoption initiatives for commercial products.
• Track security performance, incidents, and continuous improvements.

Skills

Cloud security

Threat modeling

Vulnerability management

OWASP

SAST/DAST

Penetration testing

Python scripting

CI/CD security

Web technologies

Education

Bachelor's degree in Info Security

CISSP

CSSLP

CISM

CCSP

Tools

Burp Suite

GitHub Advanced Security

Qualys

Tenable

Barracuda WAF

AWS

Azure

Job description

symplr is seeking a Product Security Manager to drive security across enterprise software products from development through deployment and maintenance. You will define security requirements, perform threat modeling, and lead vulnerability management with cross‑functional teams to embed security in CI/CD pipelines.

The role emphasizes incident response readiness and ongoing security improvements. Ideal candidates have 4–5+ years of security experience, CISSP/CSSLP/CISM/CCSP are a plus, and strong