> Markdown version of [/jobs/ext/4624672-software-engineering-manager-application-security-new](https://www.wearedevelopers.com/jobs/ext/4624672-software-engineering-manager-application-security-new). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineering Manager - Application Security NEW

- **Company:** Briefed Inc.
- **Location:** San Mateo, CA, United States
- **Experience:** Experienced
- **Salary:** $295,250.0 - $345,040.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Software System Penetration Testing, C++ (Programming Language), Cloud Computing, Static Program Analysis, Cyber Security, Continuous Integration, Programming Tools, Python (Programming Language), Open Web Application Security, Systems Development Life Cycle, Cloud Services, Secure Coding, Software Engineering, Google Cloud, Software Security, Containerization, Kubernetes, Roblox, Api Gateway, Devsecops, Docker, Static Application Security Testing, Golang, Microservices, Dynamic Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25304_01356bf255c362a7cb2320c6b2096f34

## About the Role

* 8+ years of progressive professional experience in Information Security, with a deep specialization in Application Security or Product Security.
 * 2+ years of direct people management experience leading and growing software or security engineering teams.
 * Secure SDLC & Program Delivery: Proven track record driving security programs across the end-to-end software development lifecycle in fast-paced engineering environments.
 * Vulnerability & Secure Code Expertise: Solid mastery of common software vulnerabilities (OWASP Top 10, CWEs), remediation patterns, threat modeling, and secure coding frameworks.
 * Modern Cloud & CI/CD Ecosystems: Practical experience securing microservices, containerized applications, and cloud-native environments (AWS/GCP, Docker, Kubernetes) integrated with automated CI/CD pipelines.
 * Cross-Functional Collaboration: Outstanding communication and leadership skills to align security priorities with engineering velocity and business objectives., * Prior experience building in-house AppSec automation, AST integrations, or developer-facing security platforms at massive consumer scale.
 * Familiarity with bug bounty program management, secure software supply chain controls (SBOA, dependency management), and API gateway security.
 * Hands-on background in software development (Go, C++, Python, Java) prior to moving into security management.

## Description

As Engineering Manager of Application Security, you will lead and grow a dedicated team of AppSec engineers responsible for protecting Roblox's products, cloud services, microservices, and development ecosystem. Reporting to the Senior Manager of Application Security, you will balance hands-on security leadership with strategic investments in automated developer tooling, secure SDLC practices, and DevSecOps integrations. You will partner closely with engineering and infrastructure teams across the company to reduce vulnerabilities and protect platform assets while maintaining high engineering velocity., * AppSec Team Leadership: Recruit, lead, and mentor a high-performing team of Application Security engineers, establishing clear career paths, performance goals, and operational excellence.

 * Secure SDLC & Security Architecture: Drive security initiatives across all stages of the software development lifecycle, establishing secure design reviews, threat modeling, static/dynamic code analysis (SAST/DAST), and penetration testing cadences.
 * DevSecOps & Developer Automation: Build and scale automated security controls, guardrails, and developer tooling directly into modern CI/CD pipelines, container registries, and cloud deployment environments.
 * Cross-Functional Risk Reduction: Partner with software engineering and cloud infrastructure teams to identify software risks, remediate OWASP Top 10 vulnerabilities, and establish secure coding baselines.
 * Strategic Program Execution: Drive multi-quarter security programs from strategy and tooling selection through engineering rollout and company-wide adoption.
 * Developer Enablement & Velocity: Bridge technical security requirements with developer productivity, enabling engineering teams to ship features quickly and safely.