> Markdown version of [/jobs/ext/1793314-sr-manager-application-security](https://www.wearedevelopers.com/jobs/ext/1793314-sr-manager-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Manager, Application Security - **Company:** Marriott International, Inc. - **Location:** Bethesda, MD, United States (Remote available) - **Experience:** Expert - **Salary:** $110,400.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** JIRA, Cyber Security, Github, Open Source Technology, Open Web Application Security, Systems Development Life Cycle, Release Management, Software Engineering, Software Security, Information Technology, Enterprise Integration, Jenkins, Servicenow, Static Application Security Testing, Dynamic Application Security Testing - **Published:** July 17, 2026 - **Apply:** https://dejobs.org/x/x/C0CC7824D55B41FCA479E9DDAE7D157A/job/ ## About the Role * Bachelor's degree in Information Technology, Cybersecurity, Computer Science or related field or equivalent experience/certification * 7+ years of experience in Information Technology/Security including: * 4+ years information security leadership * 2+ years as a team lead or manager in a security role response for managing security assessments, risk management, and compliance efforts for production systems. * 2+ years of experience in software/system release management, with a focus on security validation * Expertise across AppSec testing modalities (SAST, DAST, IAST etc) * Expertise with SCA SDLC tooling and repository integration * Proficiency in GitHub, JIRA, ServiceNow, Jenkins, Harness * Strong understanding of OWASP and MITRE CVE/CWE * Ability to drive cross-functional workflow integration and prioritization Preferred Skills/Experience: * Master's degree in Cybersecurity, Computer Science, or a related discipline * Relevant certifications (CISM, CISSP, CSSLP) * Application Development and Process expertise * Proven experience across AppSec tooling vendors * Excellent written and verbal communication / presentation skills * Proven leadership experience in highly regulated environments, with strong project management skills. ## Description The Senior Manager of Application Security will serve as the operational and programmatic leader for the AppSec organization, partnering closely with the Director of Application Security to scale delivery, strengthen integration with Security Architecture, and ensure consistent execution of AppSec priorities. This role leads cross-team coordination, drives prioritization, improves repeatable and automated processes, ensures alignment with risk and engineering teams, and elevates visibility of AppSec work across the organization., * Lead day-to-day operational execution of AppSec programs * Collaborate on Strategy formulation and execution. * Strengthen SER/AppSec integration * Drive prioritization frameworks and alignment with enterprise objectives * Establish repeatable, automated AppSec processes * Represent AppSec in cross-functional governance forums * Increased automation and repeatability. Shifting tooling integration left. * Clear metrics and reporting covering: operational, security and strategy perspectives * Implement initiatives for secure open-source consumption and artifact management Technical Oversight * Monitor and assess application security risks * Develop and track security metrics * Recommend mitigation strategies * Provide technical leadership regarding tooling integration, process definition and execution Stakeholder Alignment & Communication * Ensure AppSec work is well-communicated and visible * Deliver concise reporting to stakeholders * Mentor AppSec team members * Translate complex technical concepts for non-technical audiences Managing Work, Projects, and Policies * Coordinates and implements work and projects as assigned. * Generates and provides accurate and timely results in the form of reports, presentations, etc. * Analyzes information and evaluates results to choose the best solution and solve problems. * Develops specific goals and plans to prioritize, organize, and accomplish work. * Sets and tracks goal progress for self and others. * Monitors the work of others to ensure it is completed on time and meets expectations. * Provides direction and assistance to other organizational units' policies and procedures, and efficient control and utilization of resources. Success Measures (First 12 Months) * Improved Security Architecture/AppSec workflow integration * Increased automation and repeatability. * Establishment of clear metrics for operational, security and strategic reporting * Clear work prioritization * Improved visibility and transparency of AppSec processes, execution and deliverables ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)