Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
We are seeking an Application Security Manager to lead and scale our Application Security program. You will serve as the liaison between Engineering and Security, integrating security into the development process from the outset. This role emphasizes automation and actionable guidance, with a focus on developer empathy and collaboration.
Responsibilities
- Lead secure design reviews and threat modeling to identify risks early in the development lifecycle.
- Deploy and operationalize SAST, DAST, SCA, and secrets scanning across repositories and pipelines.
- Partner with the Platform DevOps team to build and maintain security automation within CI/CD pipelines.
- Help architect secure-by-default frameworks, workflows, and reusable patterns for engineering teams.
- Conduct application security code reviews and provide clear, developer-friendly remediation guidance.
- Define and enforce SLA governance for security findings, including prioritization and remediation tracking.
- Maintain an accurate and up-to-date application asset inventory.
- Create and maintain Developer Security Standards with familiarity across Azure DevOps, GitHub Enterprise, and GitHub Advanced Security.
- Evaluate and implement security tooling and automation to improve application security posture and operational efficiency.
- Lead the Security Champions Program to foster a security-first culture across engineering and IT operations.
- Serve as a trusted advisor to development and cross-functional teams, translating security risks into prioritized actions.
- Deliver training on secure coding practices to empower developers to own security outcomes.
Requirements
- 4+ years of hands-on application security experience, including cloud-based and containerized environments.
- Proven experience with secure code reviews and ability to interpret SAST, SCA, and DAST findings.
- Strong working knowledge of modern CI/CD workflows, including Azure Pipelines and GitHub Actions.
- Deep familiarity with the OWASP Top 10 for web applications and APIs.
- Hands-on experience with security tooling such as Snyk, Cycode, Apiiro, Burp Suite, or equivalents.
- Familiarity with cloud platforms (AWS, Azure) and containerization technologies (Docker, Kubernetes).
- Ability to communicate complex security concepts clearly and drive buy-in across engineering levels.
- Strong collaboration skills and a developer-first mindset.
Skills
- SAST
- DAST
- SCA
- Secrets Scanning
- CI/CD
- Azure DevOps
- GitHub Enterprise
- GitHub Advanced Security
- OWASP Top 10
- Snyk
- Cycode
- Apiiro
- Burp Suite
- AWS
- Azure
- Docker
- Kubernetes
- Python
- Java
- C#
- AI-SBOM
- AI-SDLC
Location
- Hybrid
Work Type
- Hybrid
- Full-time
Experience Level
- 4+ years of hands-on application security experience
Education Level
- Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent professional experience)
Benefits
- Support for professional accreditations
- Flexible arrangements
- Generous holidays
- Additional day off for your birthday
- Continuous mentoring
- Active sports, events and social committees
- 24/7 support from Employee Assistance Program
- Opportunity to invest in our growth and success through Employee Share Plan
- Additional local benefits
About the Company
- Alter Domus is a world-leading provider of integrated solutions for the alternative investment industry.
- We are home to 90% of the top 30 asset managers in the private markets and over 6,000 professionals across 24 jurisdictions.
- We believe in being different in what we do, how we work, and how we enable and develop our people.
- Find out more about life at Alter Domus at careers.alterdomus.com.
Equal Opportunity
- All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.