Product Security Manager

Required

• 5+ years in product security, application security, or a closely related security engineering discipline, with demonstrated technical leadership experience.
• Deep expertise in SAST and DAST tooling, including tool selection, integration into CI/CD pipelines, and results-driven vulnerability remediation programs.
• Hands-on experience conducting or coordinating penetration testing engagements, including scoping, execution, and remediation validation.
• Strong applied cryptography knowledge, including symmetric and asymmetric encryption, PKI, key management, and secure protocol design.
• Experience owning vulnerability management programs, including prioritization frameworks, SLA enforcement, and executive reporting.
• Proficiency with secrets management platforms such as HashiCorp Vault, including policy design and access control architecture.
• Experience securing CI/CD pipelines and GitOps workflows, including IaC security review and automated security gate implementation.
• Proficiency in one or more general-purpose programming languages (Python, Go, Rust, or equivalent).
• Familiarity with government compliance frameworks including NIST 800-171, CMMC, and FedRAMP.
• Ability to obtain and maintain a TS/SCI clearance.
• U.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.