Application Security Manager

Pay Range: $90/hr to $95/hr on Inc.

French is must

Your New Company

Your New Role

• The consultant will act as the Product Manager for the Frontier AI DevSecOps pillar. They will be responsible for driving the product vision of the pillar and transforming program directions into a coherent, prioritized roadmap focused on measurable outcomes.
• The DevSecOps initiative aims to prevent the introduction of new vulnerabilities, accelerate remediation of existing vulnerabilities, reduce application exposure, and implement the controls and mechanisms necessary to drive adoption across delivery teams.
• The successful candidate will define and evolve the DevSecOps product vision, strategy, and roadmap aligned with Frontier AI objectives. The role is responsible for driving prioritization of capabilities and investments based on value, risk, dependencies, and impact on development teams.
• You will lead the evolution of capabilities covering SAST, SCA, Infrastructure as Code (IaC), secrets management, containers, and DAST/fuzzing, including integration with GitHub, Azure DevOps, TFVC, and delivery pipelines. The role will also focus on improving visibility and traceability of application assets, including inventories, repositories, applications, ownership information, and Software Bills of Materials (SBOMs).
• The successful candidate will enhance vulnerability consolidation and contextualization, risk-based prioritization, and mechanisms enabling teams to focus on the most critical risks. You will guide capabilities that accelerate remediation and automation, including automated remediation pull requests, exception management, and dependency evergreening.
• You will evolve SLAs, metrics, gating mechanisms, and control effectiveness measures to provide visibility into exposure, compliance gaps, and DevSecOps adoption. The role requires close alignment with dependent initiatives and platforms, including CMDB/ServiceNow, GitHub, Azure DevOps, and SDLC security capabilities.
• Working closely with Product Owners, architects, security experts, and delivery teams, you will transform product direction into capabilities and value increments while maintaining an end-to-end vision. The role is accountable for defining outcomes, KPIs, and success criteria demonstrating risk reduction, increased coverage, control effectiveness, and team adoption while actively managing dependencies and roadmap trade-offs across multiple program workstreams.

What You Need to Do

What You'll Need to Succeed:

Experience:

• 8–12 years of relevant IT experience, including several years in Product Manager, Platform Product Manager, DevSecOps Lead, or technology product/capability leadership roles.
• Proven experience in large-scale DevSecOps, Platform Engineering, and Developer Experience environments.
• Experience in large organizations with multiple development teams, technology dependencies, and governance requirements.
• Ability to simultaneously manage roadmap planning, prioritization, stakeholder engagement, dependencies, and adoption.
• Experience in technology transformation programs, ideally involving Generative AI and AI-assisted development.

Top Requirement:

• Proven experience as a Product Manager in an Application Security environment.
• Strong technical understanding without necessarily being hands-on.
• Experience working with both Security and Development teams.
• Expected Technical Knowledge:
• GitHub Enterprise and GitHub Actions.
• GitHub Copilot and AI-assisted software development.
• CI/CD and delivery pipelines.
• SAST, SCA, secrets scanning, DAST, and application security.
• Snyk or equivalent tools.
• Vulnerability management and risk-based prioritization.
• Renovate, Dependabot, or dependency-evergreening automation tools.
• ServiceNow, particularly change management and vulnerability-related processes.
• Cloud platforms, containers, Kubernetes, and Infrastructure as Code (IaC).
• APIs and platform integrations.
• SDLC observability and telemetry.

Process Knowledge:

• Software Development Lifecycle (SDLC).
• Secure SDLC.
• DevSecOps.
• CI/CD.
• Vulnerability Management.
• Change Management.
• Release Management.
• Dependency / Software Supply Chain Management.
• Secrets Management.
• Security Architecture and Controls.
• Technology Product Management.
• Platform Lifecycle Management and Adoption.
• Methodologies and Ways of Working:
• Product Management.
• Agile / Scrum / Kanban.
• Product Discovery.
• Outcome-driven management rather than deliverable-driven management.
• OKRs or similar frameworks.
• Value/Risk/Effort-based prioritization.
• Product roadmap management.
• Backlog management.
• Adoption and value measurement.
• DORA metrics and Developer Experience metrics.
• Platform as a Product approach.

Education:

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Technology Management, or a related field.

Essential Soft Skills:

• Excellent ability to navigate complex environments.
• Strong influence without direct authority.
• Ability to effectively communicate and simplify technical concepts for managers and executives.
• Ability to challenge technical teams, including architecture, security, and platform teams.
• Pragmatic, results-oriented, and delivery-focused.
• Capable of transforming ambiguity into priorities, action plans, and decisions.
• Strong collaboration skills across business and IT teams.
• Ability to manage competing priorities and justify trade-offs.
• Strong focus on developer experience and solution adoption.

Nice-to-Have Qualifications:

• Product Management training or certification.
• SAFe, Scrum, or Product Owner certification.
• DevOps / DevSecOps background.
• AWS and/or Azure experience.
• GitHub expertise.
• Security certifications such as CISSP, CSSLP, or equivalent certifications.

Language Requirements:

• Excellent French and intermediate English.
• English-only profiles will not be considered.

What You'll Get in Return:

You will have the opportunity to work with a talented team of professionals in a dynamic and supportive environment. The organization is offering competitive compensation, professional development opportunities, and the chance to make a significant impact on a strategic DevSecOps transformation initiative.

What You Need to Do Now:

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.

This posting is for an existing vacancy with the organization.

AI may be used to screen, assess or select applicants for the position.