# Application Security Manager

**Company**: Hewlett Packard Enterprise
**Location**: Bengaluru, Karnātaka
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/Bengaluru-Karntaka-India/Application-Security-Manager_1217229-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_fe1d58f9-92f

## Description

Hewlett Packard Enterprise is seeking an experienced Application Security Manager to join their team in Bengaluru, India.

The successful candidate will lead and develop a growing team of 5–7 senior application security engineers.

Key responsibilities:

- Lead day-to-day team operations, including sprint planning, workload prioritization, and vendor coordination.

- Provide technical direction and guidance to engineers, reviewing triage decisions and remediation guidance.

- Define team processes, runbooks, and RACI to ensure scalability.

- Build and mature a scalable Application Security operating model with clear ownership and measurable outcomes.

- Establish strong working relationships with application owners and engineering leads.

- Drive adoption of security controls and negotiate practical, risk-based remediation timelines.

- Oversee the team's operation of static application security testing (SAST), software composition analysis (SCA), secret scanning, and dynamic application security testing (DAST).

- Drive the threat modeling program and establish risk-based vulnerability management SLAs.

- Lead web application and API protection (WAAP) onboarding and operations.

- Ensure effective management of policy tuning, false positives, and incident support.

- Oversee CI/CD security controls, open-source supply chain risk management, and SaaS Security Posture Management (SSPM).

- Help stand up AI/LLM security practices.

Requirements:

- 12+ years in information security, with at least 5 years focused on application security.

- 4+ years managing security engineers.

- Strong technical depth across SAST, SCA, DAST, and secret scanning.

- Strong understanding of web and API vulnerabilities and how they are remediated in code.

- Experience overseeing WAF/WAAP operations in production.

- Proven ability to build trusted relationships with application owners and influence engineering teams.

- Experience working effectively with globally distributed teams and stakeholders.

Benefits:

- Comprehensive suite of benefits supporting physical, financial, and emotional wellbeing.

- Investment in career development and growth.

- Unconditional inclusion and flexible work arrangements.

## Skills

### Required
- SAST
- SCA
- DAST
- secret scanning
- web and API vulnerabilities
- CI/CD platforms
- cloud-native environments
- WAF/WAAP operations

### Nice to have
- threat modeling methodologies
- SSPM
- AI/LLM security risks
- CSSLP
- OSWE
- GWAPT
- CISSP

---

Source: [Apply at hpe.wd5.myworkdayjobs.com](https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/Bengaluru-Karntaka-India/Application-Security-Manager_1217229-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)