Senior Manager of Application Security

• Prosper is seeking an experienced Application Security Senior Manager to lead our Application Security program. Reporting to the Head of Information Security, this role drives the strategy, implementation, and optimization of application security controls across the organization
• This position requires deep technical proficiency and the leadership skills to influence technology and product teams across the organization
• Program Leadership: Define and execute a multi-year Application Security roadmap aligned with business goals and industry best practices
• Security Engineering & Automation: Integrate threat modeling, security tools & testing (SAST, SCA, DAST, IAST, RASP, etc.), and secure by design processes into the SDLC (CI/CD pipeline)
• Architecture Reviews: Perform security architecture reviews for major product changes
• Vulnerability Management: Oversee the end-to-end AppSec vulnerability lifecycle (identification, prioritization, and remediation based on business risk, exploitability, and threat intelligence)
• Incident Response: Direct and manage incident response for application security alerts/incidents
• Offensive Security & Testing: Lead the strategy for third party penetration tests
• Reporting & Metrics: Deliver executive-level dashboards and reports on application security posture and risk trends
• Team Leadership: Manage and mentor a high-performing team of AppSec engineers, fostering a vision for excellence
• Continuous Improvement: Drive continuous improvement activities, and deepen leadership awareness of product and application security risks
• Strategic Partnership & Collaboration: Collaborate with Engineering and Product leads to embed security into the SDLC and scale the Security Champions program

Benefits

• Take-what-you-need (paid) vacation for salaried employees
• 20 days of PTO and 7 paid holidays/year for hourly employees
• Stock options
• 401K retirement savings plan with generous matching
• Comprehensive health, dental and vision insurance plans, with options specific to your own health coverage needs
• Prosper Fit - A monthly stipend to use for gym memberships, personal training sessions, yoga and exercise classes, or club sports/fitness fees
• Pre-tax commuter/parking assistance
• Snacks and beverage selections in our kitchen
• Monthly meet-and-greet happy hours
• Perkspot discount programs
• One Medical
• SF Location - Rooftop deck with ping-pong and foosball table

• We are looking for smart, self-driven candidates who want to be part of an innovative FinTech company with a mission to improve the financial well-being of its customers
• Deep technical knowledge with a track record of successful execution in application security (secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
• Strong working knowledge of at least two programming or scripting languages
• Great interpersonal skills, ability to foster constructive dialogue
• Prior people leadership experience (3+ years) with the ability to lead, manage, and develop a technical Application Security Engineering team
• Strong knowledge of CI/CD pipelines, cloud-native security (GCP), and container security
• Bachelor’s degree in Computer Science or a related field, or its equivalent in work experience
• 10+ years of progressive application security experience (prior software development experience preferred)
• We encourage you to apply even if your experience doesn’t precisely match the job description