Senior Technical Program Manager, Application & Platform Security

True Anomaly, Inc.; Long Beach (CA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Healthcare

Time off

Lunch & snacks

401k & reimbursements

Equity

Job summary

True Anomaly, Inc. is seeking a Senior Technical Program Manager for Application & Platform Security in Long Beach, CA.

This role leads the Security & Infrastructure PMO, driving end-to-end delivery across Application Security and Platform Security with cross-functional software engineering partners. The position requires 10+ years in security-focused TPM work, strong Jira discipline, and the ability to manage multiple concurrent workstreams while maintaining clear leadership visibility and risk

Qualifications

• 10+ years combining application and platform security with the technical program management of that work—deep in at least one domain and credible in the other.
• Demonstrated ability to manage concurrent workstreams with cross-functional dependencies and external stakeholders.
• Strong Jira or equivalent proficiency; able to build and maintain structured tracking across multi-team portfolios.

Responsibilities

• Own end-to-end delivery for Application Security and Platform Security initiatives—build and maintain program plans, milestone schedules, and dependency maps in Jira, driving from intake through close.
• Run both teams' operational cadences—sprint/backlog grooming, weekly status, and quarterly planning, maintaining backlog health and ticket hygiene.

Skills

Technical program mgmt

Application security

Platform security

Cross-functional collaboration

Jira proficiency

Stakeholder management

Tools

Jira

Job description

Senior Technical Program Manager, Application & Platform Security

Long Beach, CA

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

• Be the offset. We create asymmetric advantages with creativity and ingenuity.
• What would it take? We challenge assumptions to deliver ambitious results.
• It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS *

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

YOUR MISSION

We are looking for a Senior Technical Program Manager to join the Security & Infrastructure PMO, dedicated to our Application Security and Platform Security teams in Long Beach. You will be the embedded program management partner to these two teams, driving execution from intake through delivery, running their operational rhythms, engaging with cross-functional software engineering teams, and keeping leadership's view of commitments and risk current and honest.

Application Security owns the security of the software we build: secure development practices, product and application security programs, vulnerability management, and the controls that keep our codebase and pipelines defensible. Platform Security owns the security of the environments that software runs in: cloud and platform security, identity and access management, infrastructure hardening, and the operational processes that keep those domains healthy. Your job is to make both teams more predictable and more effective—turning technical work into tracked, milestone-oriented programs and surfacing conflicts before they become delivery problems. It is also part engagement manager and part product manager: the company's software engineering teams are App Security and Platform Security's customers, and you help understand their needs and shape how security capabilities are delivered back to them.

This is a dedicated role, but not a static one. Your primary charter is Application Security and Platform Security, and that is where you'll build the deepest context. As portfolio priorities shift, you should expect to flex across other Security & Infrastructure programs when the PMO needs it, bringing the same execution rigor wherever you're pointed.

RESPONSIBILITIES

• Own end-to-end delivery for Application Security and Platform Security initiatives—building and maintaining the program plans, milestone schedules, and dependency maps in Jira, and driving them from intake through close
• Run both teams' operational cadences—sprint/backlog grooming, weekly status, and quarterly planning—and keep backlog health and ticket hygiene good enough that status is trustworthy without a fire drill
• Partner with the team leads on effort estimation, task decomposition, and resource alignment across concurrent workstreams; surface capacity conflicts and schedule risk early, with options
• Serve the software engineering teams as the primary customers of App Security and Platform Security—intake their requests, set expectations on what security can deliver and when, and keep that channel active rather than reactive
• Manage cross-functional dependencies with software engineering, IT, GRC, cloud/platform, and external vendors and assessors
• Produce leadership-ready program visibility—milestone-oriented, risk-flagged, and current—including the roll-ups and tear-sheets the PMO uses for steering
• Partner with the PMO Lead on roadmap planning: prioritization, capacity planning, and keeping the plan of record maintained as priorities shift
• Flex to other Security & Infrastructure programs as portfolio demand requires, bringing the same execution discipline to an unfamiliar domain

QUALIFICATIONS

• 10+ years combining application and platform security with the technical program management of that work—deep in at least one domain (secure SDLC, vulnerability management, CI/CD pipeline security; cloud and infrastructure security, identity and access management), credible in the other, with a track record of owning and running programs end to end
• Demonstrated ability to manage concurrent workstreams with cross-functional dependencies and external stakeholders
• Strong Jira or equivalent proficiency; able to build and maintain structured tracking across multi-team portfolios
• Comfortable operating where scope, priorities, and assignments shift with portfolio demand
• Clear, direct communicator; able to simplify complex status for executive audiences and push back when warranted
• U.S. citizenship required; clearable required

PREFERRED SKILLS AND EXPERIENCE

• Prior experience as an information security engineer who has since moved into technical program management (preferred over a TPM background without hands‑on security experience)
• Familiarity working directly with software engineering and platform/DevOps teams
• Familiarity with NIST RMF, FedRAMP, or federal compliance environments
• Experience in defense technology, aerospace, or DoD contractor environments

COMPENSATION

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job‑related knowledge and skills, education, location, and experience.

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near Long Beach. While we observe a hybrid work environment, some work must be done on site.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

To protect candidates and our company from application fraud and impersonation, we use third‑party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice .

Voluntary Self‑Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in True Anomaly’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A \"recently separated veteran\" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.