# Senior Manager, Cyber Security Product Manager, AppSec

**Company**: Capital One
**Experience**: senior
**Job type**: full-time
**Salary**: $229,900 - $262,400 per year
**Category**: Security
**Industry**: Finance

**Apply**: https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Senior-Manager--Cyber-Security-Product-Manager--AppSec_R1002078-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9c201a72-109

## Description

We are seeking a Senior Manager, Cyber Security Product Manager, AppSec to join our team at Capital One. As a Cyber Security Professional, you will evaluate cyber capabilities, threat intelligence, and risk management to drive cybersecurity governance, capability maturation, and risk transformation across the organisation.

**Key Responsibilities:**

- Develop and own the multi-year product roadmap for Application Security, aligning with enterprise risk appetites and the evolving threat landscape.

- Collaborate with Security Engineering Enablement and Architecture to translate security requirements into scalable, fix-first developer workflows.

- Strategically evaluate Appsec security tools to maximise ROI and maintain a best-in-class toolset.

- Define the product strategy for AI-application security, including secure integration of AI agents into the SDLC, prompt engineering guardrails, and automated remediation pipelines.

- Evangelise the AppSec mission through Office Hours and community forums, simplifying complex technical risks for executive leadership.

- Establish the governance model for vulnerability disposition, ensuring clear SLAs, audit trails, and exception workflows.

**Basic Qualifications:**

- Bachelor's Degree

- At least 7 years of experience in cybersecurity or information technology

- At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities

- At least 3 years of application security experience

**Preferred Qualifications:**

- 7+ years of experience working on teams and presenting to stakeholders cybersecurity information

- 3+ years of experience developing or interpreting cybersecurity metrics or dashboards

- 3+ years of people management experience

- 2+ years of experience developing or overseeing cybersecurity or technology risk programs

- Demonstrated familiarity with industry governance or financial governance processes

- Ability to perform security incident analysis and assist with resolution

- 4+ years in Application or Product Security or Software Engineering with an emphasis on AppSec and vulnerability management strategy

- 4+ years of experience managing AppSec products in a large-scale enterprise

- 2+ years of experience defining standards for AI-augmented development and ethical AI usage

- Professional certifications (CISSP, CISM, OSCP)

- 2+ years of experience working in cloud-native environments

- Knowledge of OWASP Top 10 and software supply chain security

- Experience with automated DAST and manual Penetration Testing

**Salary Information:**

- McLean, VA: $229,900 - $262,400 per year

- New York, NY: $250,800 - $286,200 per year

- Plano, TX: $209,000 - $238,500 per year

- Richmond, VA: $209,000 - $238,500 per year

- Riverwoods, IL: $209,000 - $238,500 per year

- San Jose, CA: $250,800 - $286,200 per year

**Benefits:**

- Comprehensive, competitive, and inclusive set of health, financial and other benefits

## Skills

### Required
- cybersecurity
- information technology
- application security
- threat intelligence
- risk management

### Nice to have
- cybersecurity metrics
- dashboard development
- people management
- cybersecurity risk programs
- governance
- security incident analysis
- AI-augmented development
- cloud-native environments
- OWASP Top 10
- software supply chain security

---

Source: [Apply at capitalone.wd12.myworkdayjobs.com](https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Senior-Manager--Cyber-Security-Product-Manager--AppSec_R1002078-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)