Application Security Engineering Manager

I’m hiring for an Application Security Engineering Manager to lead and scale a high-impact AppSec function in a deeply technical financial environment. This is a leadership role for someone who combines strong application security expertise, people-management capability, and the communication skills to influence senior engineering and business stakeholders.

You will manage a distributed AppSec team, including leadership responsibility for a global team, while helping build out the New York function. The role will involve setting direction, prioritising work, developing engineers, and ensuring the team continues to deliver practical, high-quality application security outcomes across a demanding engineering environment.

This is not a purely hands-off management role, but it does lean more toward leadership. You should bring enough technical credibility to challenge designs, guide secure development practices, support complex AppSec decisions, and partner effectively with engineers. The environment has a high technical bar, so credibility matters.

A major part of the role will involve AI security. The person in this position is expected to help shape how the firm thinks about application security in an AI-enabled development environment, including secure AI adoption, AI-assisted coding risks, controls, governance, and future hiring for a dedicated AI Security Lead.

The ideal candidate has led AppSec teams in sophisticated engineering environments, understands secure SDLC, threat modelling, code review, application architecture risk, cloud/application controls, and modern software delivery practices. You should also be comfortable communicating with senior stakeholders and, over time, acting as a trusted deputy to the CISO on broader InfoSec and AI-related security decisions.

This is an opportunity to lead, shape, and grow an AppSec function with real executive visibility, strong technical expectations, and significant future runway.

Hybrid out of NYC with 3 days per week in office and 2 days remote.