Senior Manager Application Security
About The Position
About the role: As the Senior Manager of Application Security at TQL, you will lead and mature our enterprise-wide application security program. You'll drive strategy, governance, and execution for securing applications across the SDLC, enabling our business to innovate rapidly while maintaining strong security controls. This role requires deep technical expertise, leadership, and business acumen to collaborate with development teams, architects, and senior stakeholders. What's in it for you: Position based in Cincinnati, OH, Charlotte, NC or Tampa, FL (relocation assistance provided) Competitive base salary and comprehensive benefits package Advancement opportunities with structured career paths Access to the latest emerging technologies Reimbursement for continuous education and technical training Voted a 2019-2025 Computerworld Best Places to Work in IT
Requirements
- Bachelor's or Master's degree in Computer Science, Information Security, or related field required
- 10 years of progressive experience in cybersecurity, with at least 5 years focused on application security
- 3+ years in a leadership role managing security teams
- Strong technical knowledge of application security practices (OWASP, NIST SSDF) and DevSecOps methodologies
- Experience with application security tools (e.g., Veracode, Snyk, Checkmarx, Burp Suite)
- Excellent communication, leadership, and stakeholder management skills
- Demonstrated experience driving maturity of application security through outcome-driven metrics
Nice To Haves
- Professional certifications such as CISSP, CSSLP, GWAPT, or OSWE preferred
- Experience in high-transaction, fast-paced industries (logistics, e-commerce, financial services) preferred
- Familiarity with cloud-native security (AWS, Azure, GCP)
Responsibilities
- Develop and execute TQL's application security strategy, aligning with enterprise security goals and business objectives
- Define policies, standards, and best practices for secure software development and application protection
- Establish governance frameworks and reporting mechanisms to track risk posture and program effectiveness
- Lead, mentor, and grow a team of application security engineers and analysts
- Collaborate with product and development leadership to embed security within DevOps and agile practices
- Oversee secure code reviews, threat modeling, penetration testing, and application vulnerability management
- Integrate automated security testing tools (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines
- Evaluate and deploy emerging technologies to strengthen TQL's application security posture
- Identify, prioritize, and remediate application risks across web, mobile, and cloud-native applications
- Provide executive-level reporting on application security risks and key metrics
- Ensure compliance with regulatory and industry standards (e.g., PCI-DSS, CCPA)
- Serve as the primary liaison between cybersecurity and development/business units on application security matters
- Educate stakeholders on secure coding practices and advocate for security as a business enabler
Benefits
- Position based in Cincinnati, OH, Charlotte, NC or Tampa, FL (relocation assistance provided)
- Competitive base salary and comprehensive benefits package
- Advancement opportunities with structured career paths
- Access to the latest emerging technologies
- Reimbursement for continuous education and technical training
- Voted a 2019-2025 Computerworld Best Places to Work in IT
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Industry
Support Activities for Transportation
Number of Employees
1,001-5,000 employees
