Senior Manager - Application Security

Stack

Responsibilities

• ▹Lead and mentor a globally distributed security engineering team
• ▹Provide project management leadership for team initiatives
• ▹Coordinate cross-functional and cross-stream initiatives
• ▹Drive integration of security into the Discover-Define-Deliver lifecycle
• ▹Collaborate on early-stage threat modeling and risk reviews with Product/Engineering/Design
• ▹Evolve Secure SDLC practices across CI/CD, IaC and developer tooling
• ▹Oversee bug bounty and third-party testing programs
• ▹Build and scale the Security Champions program
• ▹Guide secure adoption of AI-augmented dev tools
• ▹Help operationalize Agentic AI-driven security workflows
• ▹Define and report KPIs for secure development
• ▹Partner with Privacy, Legal and Compliance (ISO 27001, SOC 2, GDPR)

Requirements

• ▹10+ years in software/application/product security
• ▹3+ years of technical leadership/management in security
• ▹Extensive threat modeling experience (STRIDE, PASTA)
• ▹Deep SSDLC expertise
• ▹Experience running Security Champions programs
• ▹Experience leading offensive security programs (pentest, red team, bug bounty)
• ▹Practical knowledge of ISO 27001, SOC 2, OWASP SAMM
• ▹Familiarity with AI/LLM tooling (Cursor, GitHub Copilot)
• ▹Experience securing AWS, API-driven microservice architectures
• ▹Ability to manage distributed teams and communicate across stakeholders

Soft skills

About the company

Miro's application security team embeds security into every development phase while accelerating developer innovation.