Sr. Engineering Manager, Application Security

United States Digital Space LLC; New York (NY); Hybrid; USD 210,000 - 250,000; Full time

Benefits offered by this job

401(k) match

Flexible PTO

Professional coaching

Sabbatical after 6 years

Comprehensive medical/dental/vision

Job summary

United States Digital Space LLC is seeking a Senior Engineering Manager to lead the Security team's Application Security squad in NYC. You will shape threat models, review designs, and guide vulnerability management to enable secure software at scale.

You will mentor engineers and partner with product, legal, compliance, and risk to align security with business goals. The role is hybrid with NYC-based office work four days a week, with salary range highlighted for transparency.

Qualifications

• Deep expertise in application security across the SDLC.
• Experience building threat models for complex systems.
• Proven ability to review designs for security and code for vulnerabilities.
• Ability to mentor and grow senior engineers.
• Familiarity with AI-assisted security tools a plus.

Responsibilities

• Oversee threat modeling, design reviews, and vulnerability management.
• Drive secure-by-default practices across engineering teams.
• Lead and mentor the AppSec squad with a player-coach approach.
• Collaborate with product, legal, compliance, and risk stakeholders.
• Define and execute a roadmap balancing proactive security and remediation.

Skills

Application security

Threat modeling

Secure design review

Vulnerability management

Cloud native AWS/Kubernetes

CI/CD tooling

Mentorship

Tools

AWS

Kubernetes

CI/CD

Job description

About the company

the company is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We’re headquartered in NYC and offer hybrid NY-based positions (four days/ week in-office, with no required office days during the summer and winter holidays).

About the Role:

As a Senior Engineering Manager leading the the company Security team’s Application Security squad, you’ll collaborate closely with engineering teams across the company as your squad helps developers build secure software by default. Your team shapes how the company threat models new systems, reviews designs, manages vulnerabilities, and equips engineers with the tools, libraries, and guardrails that make the secure path the easy path.

You’ll work with team and company leadership to develop and drive a mission-aligned roadmap and manage its execution with your team. You’ll also partner with engineers on your team and beyond to identify and advocate for the work that will most meaningfully reduce risk to the company and our customers. You’ll play a crucial role in balancing proactive security investments alongside response and remediation, all while helping mentor and grow a team of amazing engineers.

At the company, security is foundational to the trust our customers place in us with their financial lives. Our Application Security squad empowers and enables the entire engineering organization and works closely with product and platform teams to deliver controls, tooling, and partnerships that let us deliver value to the company’s customers and clients without compromising on safety. Members of this team have a love for solving interesting security challenges and improving the lives of our developers in ways that move our engineering organization and the business forward. You’ll be a part of a team that’s tackling difficult questions of secure design at scale in a deeply regulated industry where the stakes are real.

This role is based out of our NYC office. Below we've reflected the base salary range for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of the company’s total compensation package for employees.

• New York City: $210,000-250,000

This job may also be eligible for variable compensation in the form of a company incentive bonus.

A Day in the Life:

• Oversee the development of paved roads, libraries, and guardrails that make it easier for our developers to commit, test, build, deploy, and operate code securely by default.

• Build and maintain the threat modeling, design review, and vulnerability management programs that protect our customers, our employees, and the business.

• Drive the adoption of AI across AppSec operations to achieve scaled security workflows, creating leverage for senior engineers.

• Lead and mentor engineers on the company’s senior-leaning AppSec squad.

• Establish strong lines of communication with stakeholders across engineering, product, legal, compliance, and risk to understand and deeply support the needs of teams building products across all business lines and divisions of the company.

• Inspire and maintain a strong, equitable engineering culture founded on transparency, inclusivity, mentorship, and collaboration.

• Continuously innovate and seek out ways to meet the near- and long-term strategic security needs of our complex org.

What We’re Looking For:

• Expertise across the application security stack: secure SDLC, threat modeling, secure design review, code review, vulnerability management, and the cloud-native ecosystem (AWS, containers, Kubernetes, CI/CD).

• Experience with hands-on managing, mentoring, and inspiring a team of talented security engineers, including senior engineers. Demonstrated success as a true player-coach is a must.

• Experience establishing or scaling a Security Champions or distributed threat modeling program, with a focus on empowering engineering squads to own security outcomes and integrating these practices into the existing software development lifecycle.

• Experience leading execution of large team initiatives and execution of smaller concurrent projects in partnership with senior engineers.

• Familiarity with AI-assisted security tools and a curiosity for exploring how AI can enhance both security workflows and the security posture of the AI-powered features our engineers are building.

• A real passion for application security and for empowering developers to do the right thing easily.

• Experience collaborating with other engineering teams, product managers, subject matter experts, and non-technical stakeholders such as legal, compliance, and risk.

Join a team built on these core valuesWe change lives

Be a part of a community of innovators working to transform financial outcomes for real people. Your work will make an impact, always laddering up to our mission; to empower people to build wealth with confidence and ease

We set audacious goals

We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins.

We value all perspectives

When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community.

We simplify financial services

We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA.

Our Commitment to Your Total Well-being

• We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options

• Ownership: Equity for all employees, including new hire and refresher grants.

• Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year.

• Growth: Company-paid professional coaching for all employees.

• Wealth: Day-one 401(k) match plus matching on qualified student loan payments.

What happens next

We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues.

In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at the company. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions.

On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of