Description
Hewlett Packard Enterprise is seeking an experienced Application Security Manager to join their team in Bengaluru, India.
The successful candidate will lead and develop a growing team of 5–7 senior application security engineers.
Key responsibilities:
- Lead day-to-day team operations, including sprint planning, workload prioritization, and vendor coordination.
- Provide technical direction and guidance to engineers, reviewing triage decisions and remediation guidance.
- Define team processes, runbooks, and RACI to ensure scalability.
- Build and mature a scalable Application Security operating model with clear ownership and measurable outcomes.
- Establish strong working relationships with application owners and engineering leads.
- Drive adoption of security controls and negotiate practical, risk-based remediation timelines.
- Oversee the team's operation of static application security testing (SAST), software composition analysis (SCA), secret scanning, and dynamic application security testing (DAST).
- Drive the threat modeling program and establish risk-based vulnerability management SLAs.
- Lead web application and API protection (WAAP) onboarding and operations.
- Ensure effective management of policy tuning, false positives, and incident support.
- Oversee CI/CD security controls, open-source supply chain risk management, and SaaS Security Posture Management (SSPM).
- Help stand up AI/LLM security practices.
Requirements:
- 12+ years in information security, with at least 5 years focused on application security.
- 4+ years managing security engineers.
- Strong technical depth across SAST, SCA, DAST, and secret scanning.
- Strong understanding of web and API vulnerabilities and how they are remediated in code.
- Experience overseeing WAF/WAAP operations in production.
- Proven ability to build trusted relationships with application owners and influence engineering teams.
- Experience working effectively with globally distributed teams and stakeholders.
Benefits:
- Comprehensive suite of benefits supporting physical, financial, and emotional wellbeing.
- Investment in career development and growth.
- Unconditional inclusion and flexible work arrangements.