Application Security Senior Manager

Booz Allen Hamilton•Annapolis Junction, MD

6d•Remote

About The Position

Establish and grow Booz Allen’s Application Security practice as part of a team. Define the Application Security team’s direction, standards, and requirements for services and solutions sold to Booz Allen Commercial customers. Enable businesses to understand risks and overall security posture of their application constructs. Educate and influence client software engineering teams on cybersecurity best practices. Assist clients to establish Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) relevant to their product and market goals around cybersecurity assurance. Work proactively with leaders across all levels to design, implement, and support solutions that ensure clients have a secure-by-design and best practice approach across the full application security lifecycle in addition to working jointly with leaders across application development, technical and enterprise architecture, software reliability, and cybersecurity to ensure application architectures and designs properly consider security best practices. Lead, hire, and inspire teams of Application Security Engineers and Architects to perform security posture assessments of development and operational systems and provide recommendation and remediation plans along with development, implementation, and support of operational models supporting solutions and services meeting client requirements. Integrate latest Frontier AI solutions into client environments and to assist with delivery. Lead the business development and sales activities related to Application Security.

Requirements

10+ years of experience with application development and developing, architecting, and implementing software security solutions
5+ years of experience leading technical teams in an Application Security field
Experience managing across SDLC, including vulnerability management considerations, threat modeling, and modern development tools and frameworks
Experience in application security testing methodologies, including DAST, SAST, IAST, and SCA
Experience with the integration of common infrastructure security technologies and solutions into business solution architectures
Experience developing and securing software with code scanning tools and CI/CD pipelines
Experience with AI scanning and Frontier models such as Mythos
Knowledge of OWASP Top 10 Vulnerabilities and prevention techniques and technology, security, risk, and compliance best practices
Bachelor's degree

Nice To Haves

Knowledge of common security frameworks, including OWASP and NIST
Ability to create collaborative relationships with colleagues and influence without authority

Responsibilities

Define the Application Security team’s direction, standards, and requirements for services and solutions sold to Booz Allen Commercial customers.
Enable businesses to understand risks and overall security posture of their application constructs.
Educate and influence client software engineering teams on cybersecurity best practices.
Assist clients to establish Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) relevant to their product and market goals around cybersecurity assurance.
Design, implement, and support solutions that ensure clients have a secure-by-design and best practice approach across the full application security lifecycle.
Ensure application architectures and designs properly consider security best practices.
Lead, hire, and inspire teams of Application Security Engineers and Architects.
Perform security posture assessments of development and operational systems and provide recommendation and remediation plans.
Develop, implement, and support operational models supporting solutions and services meeting client requirements.
Integrate latest Frontier AI solutions into client environments and assist with delivery.
Lead the business development and sales activities related to Application Security.