Senior Manager Application Security

Total Quality Logistics, Inc.•Cincinnati, OH

61d•Onsite

About The Position

As the Senior Manager of Application Security at TQL, you will lead and mature our enterprise-wide application security program. You'll drive strategy, governance, and execution for securing applications across the SDLC, enabling our business to innovate rapidly while maintaining strong security controls. This role requires deep technical expertise, leadership, and business acumen to collaborate with development teams, architects, and senior stakeholders.

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field required
10 years of progressive experience in cybersecurity, with at least 5 years focused on application security
3+ years in a leadership role managing security teams
Strong technical knowledge of application security practices (OWASP, NIST SSDF) and DevSecOps methodologies
Experience with application security tools (e.g., Veracode, Snyk, Checkmarx, Burp Suite)
Excellent communication, leadership, and stakeholder management skills
Demonstrated experience driving maturity of application security through outcome-driven metrics

Nice To Haves

Professional certifications such as CISSP, CSSLP, GWAPT, or OSWE preferred
Experience in high-transaction, fast-paced industries (logistics, e-commerce, financial services) preferred
Familiarity with cloud-native security (AWS, Azure, GCP)

Responsibilities

Develop and execute TQL's application security strategy, aligning with enterprise security goals and business objectives
Define policies, standards, and best practices for secure software development and application protection
Establish governance frameworks and reporting mechanisms to track risk posture and program effectiveness
Lead, mentor, and grow a team of application security engineers and analysts
Collaborate with product and development leadership to embed security within DevOps and agile practices
Oversee secure code reviews, threat modeling, penetration testing, and application vulnerability management
Integrate automated security testing tools (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines
Evaluate and deploy emerging technologies to strengthen TQL's application security posture
Identify, prioritize, and remediate application risks across web, mobile, and cloud-native applications
Provide executive-level reporting on application security risks and key metrics
Ensure compliance with regulatory and industry standards (e.g., PCI-DSS, CCPA)
Serve as the primary liaison between cybersecurity and development/business units on application security matters
Educate stakeholders on secure coding practices and advocate for security as a business enabler

Benefits

Position based in Cincinnati, OH, Charlotte, NC or Tampa, FL (relocation assistance provided)
Competitive base salary and comprehensive benefits package
Advancement opportunities with structured career paths
Access to the latest emerging technologies
Reimbursement for continuous education and technical training
Voted a 2019-2025 Computerworld Best Places to Work in IT

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume