Application Security Manager (People Leader) - Hybrid
Position Type: RegularYour opportunity
As the Application Security Manager (PL) in Schwab Cybersecurity Services you will be responsible for developing and overseeing an organization's application security program, ensuring security measures are integrated throughout the software development lifecycle (SDLC), by leading security assessments, identifying vulnerabilities, and working with development teams to mitigate risks and implement security best practices across all applications within the company; essentially acting as the primary guardian of application security within the organization.
Key Responsibilities:
Strategy and Policy Development:
Establish and maintain application security policies, standards, and guidelines aligned with industry best practices.
Develop a comprehensive application security strategy to identify and prioritize security risks.
Create and implement application security awareness training programs for developers and other stakeholders.
Security Assessment and Vulnerability Management:
Conduct regular security assessments of applications, including SAST scanning, code reviews, and threat modeling.
Identify and prioritize vulnerabilities discovered during security assessments.
Work with development teams to remediate vulnerabilities and track remediation progress.
SDLC Integration:
Collaborate with development teams to integrate security practices into the entire software development lifecycle (SDLC).
Champion secure coding practices and promote the use of security tools within the development process.
Team Leadership and Mentorship:
Manage and mentor a team of application security engineers.
Develop and maintain the technical expertise of the application security team.
What you have
Required Skills and Qualifications:
Deep understanding of application security principles, vulnerabilities, and mitigation strategies
Expertise in secure coding practices and common web application security threats
Experience with security assessment tools and methodologies (e.g., penetration testing, static code analysis)
Knowledge of software development lifecycle (SDLC) and Agile methodologies
Strong communication and collaboration skills to work effectively with development teams
Leadership and ability to influence stakeholders at all levels
Relevant security certifications (e.g., CISSP, CISM, CISA, OSCP, OWASP)
Education:
Bachelors degree in computer science preferred
Whats in it for you
At Schwab, were committed to empowering our employees personal and professional success. Our purpose-driven, supportive culture, and focus on your development means youll get the tools you need to make a positive difference in the finance industry. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you both today and in the future:
401(k) with company match and Employee stock purchase plan
Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
Paid parental leave and family building benefits
Tuition reimbursement
Health, dental, and vision insurance
Apply Now
As the Application Security Manager (PL) in Schwab Cybersecurity Services you will be responsible for developing and overseeing an organization's application security program, ensuring security measures are integrated throughout the software development lifecycle (SDLC), by leading security assessments, identifying vulnerabilities, and working with development teams to mitigate risks and implement security best practices across all applications within the company; essentially acting as the primary guardian of application security within the organization.
Key Responsibilities:
Strategy and Policy Development:
Establish and maintain application security policies, standards, and guidelines aligned with industry best practices.
Develop a comprehensive application security strategy to identify and prioritize security risks.
Create and implement application security awareness training programs for developers and other stakeholders.
Security Assessment and Vulnerability Management:
Conduct regular security assessments of applications, including SAST scanning, code reviews, and threat modeling.
Identify and prioritize vulnerabilities discovered during security assessments.
Work with development teams to remediate vulnerabilities and track remediation progress.
SDLC Integration:
Collaborate with development teams to integrate security practices into the entire software development lifecycle (SDLC).
Champion secure coding practices and promote the use of security tools within the development process.
Team Leadership and Mentorship:
Manage and mentor a team of application security engineers.
Develop and maintain the technical expertise of the application security team.
What you have
Required Skills and Qualifications:
Deep understanding of application security principles, vulnerabilities, and mitigation strategies
Expertise in secure coding practices and common web application security threats
Experience with security assessment tools and methodologies (e.g., penetration testing, static code analysis)
Knowledge of software development lifecycle (SDLC) and Agile methodologies
Strong communication and collaboration skills to work effectively with development teams
Leadership and ability to influence stakeholders at all levels
Relevant security certifications (e.g., CISSP, CISM, CISA, OSCP, OWASP)
Education:
Bachelors degree in computer science preferred
Whats in it for you
At Schwab, were committed to empowering our employees personal and professional success. Our purpose-driven, supportive culture, and focus on your development means youll get the tools you need to make a positive difference in the finance industry. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you both today and in the future:
401(k) with company match and Employee stock purchase plan
Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
Paid parental leave and family building benefits
Tuition reimbursement
Health, dental, and vision insurance
Apply Now