Security Cloud Assurance Project Manager

Summary: The Security Cloud Assurance Project Manager will oversee application security services, including risk assessments and architecture reviews, for both internal and third-party applications. This role involves coordinating with various stakeholders to ensure secure software development practices and providing consultative guidance throughout the software lifecycle. The position requires a strong background in application security and the ability to communicate technical risks effectively. The role is primarily remote, with an option for location in Brooklyn, New York.

Key Responsibilities:

• Perform application security services including risk assessments, architecture reviews, and code review for internal and third-party applications
• Coordinate with developers, project teams, and third-party vendors to assess and guide secure software development and integration
• Provide consultative guidance during design, development, and deployment phase of new solutions
• Review threat models, validate security controls, and ensure alignment with security policies
• Review and interpret security testing reports and vulnerability findings, and assist with risk remediation strategies
• Contribute improvements in existing AppSec process, workflows, and documentation
• Participate in defining and expanding secure software development lifecycle practices across the organization
• Support the development and refinement of policy and governance documents related to software security
• Track and report on security metrics, status of findings, and overall risk trends
• Support management of tools, resources, and schedules for security testing

Key Skills:

• At least 8 years of hands-on experience in application security, secure software development, or security consulting
• Experience conducting security reviews (code, design threat modeling, architecture) for modern applications (web, mobile, cloud-native)
• Strong knowledge of secure development practices, OWASP Top 10, and relevant standards
• Ability to communicate technical risks and recommendations clearly to technical and non-technical audiences
• Familiarity with tools used in code analysis, vulnerability scanning, and security testing
• Experience working cross-functionally with developers, engineers, and product teams

Salary (Rate): undetermined

City: undetermined

Country: USA

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT