Senior SSDLC & AppSec Program Lead (Remote)

EPITEC; Augusta (ME); Remote; USD 91,000 - 94,000; Full time

Benefits offered by this job

Benefits

Remote work

Job summary

EPITEC is seeking an experienced Application Security Program Manager to help transition a modernized Secure Software Development Lifecycle (SSDLC) into a sustainable, enterprise-wide operating program. This highly cross‑functional leadership role focuses on application security maturity, stakeholder management, organizational change, risk reduction, and continuous improvement.

The ideal candidate combines strong cybersecurity program leadership with working knowledge of application security and

Qualifications

• 8–10 years of experience in leadership, cybersecurity program management, and/or organizational change roles.
• Demonstrated experience improving application security program maturity.
• Strong experience with Secure Software Development Lifecycle (SSDLC) practices.
• Proven ability to manage complex, cross‑functional technology or cybersecurity programs.
• Strong stakeholder management and organizational change leadership skills.
• Working knowledge of application security concepts, including: security requirements, code and dependency scanning, vulnerability management, finding triage and remediation, risk treatment and exception processes.
• Ability to turn technical, security, and policy issues into clear decisions, actions, owners, and executive‑level reporting.
• Excellent facilitation, written communication, and stakeholder communication skills.
• Experience establishing repeatable processes, measuring program performance, and managing competing priorities.

Responsibilities

• Lead the transition of SSDLC initiatives from project deliverables into sustainable, repeatable operating processes.
• Maintain program roadmaps, priorities, dependencies, risks, ownership models, and continuous‑improvement backlogs.
• Partner with Vulnerability Management, Security Architecture, GRC, Application Development, platform teams, product owners, and vendors.
• Improve application security workflows covering security requirements, design reviews, scanning, vulnerability triage, remediation, exceptions, and release processes.
• Plan adoption and rollout initiatives across development and platform teams.
• Support security champions, training, office hours, and developer‑facing security guidance.
• Help development and product teams translate security findings into risk‑ranked remediation plans with clear owners and target dates.
• Track application coverage, aging findings, remediation progress, blockers, exceptions, and escalations.
• Facilitate cross‑functional working groups and leadership reviews.
• Develop meaningful program measures and coordinate reporting on adoption, remediation, application coverage, exceptions, and control performance.
• Coordinate related initiatives involving repository governance, security tooling, platform integrations, third‑party application security, and developer enablement.
• Identify resource, capacity, service, and funding dependencies and develop clear recommendations for leadership.

Skills

Leadership

Cybersecurity program mgmt

SSDLC

Stakeholder management

Organizational change

Job description

EPITEC is seeking an experienced Application Security Program Manager to help transition a modernized Secure Software Development Lifecycle (SSDLC) into a sustainable, enterprise-wide operating program. This highly cross‑functional leadership role focuses on application security maturity, stakeholder management, organizational change, risk reduction, and continuous improvement.

The ideal candidate combines strong cybersecurity program leadership with working knowledge of application security and