Senior Manager, Application Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Manager, Application Security based in Brazil. Lead the development of a dedicated application security function within a fast-growing, fully remote technology environment. In this senior leadership role, you will combine hands-on application security expertise with people management, strategic planning, and cross-functional collaboration. You will establish security standards, strengthen vulnerability management, and embed secure development practices across engineering teams. Alongside application security, you will guide experienced IT and compliance professionals, aligning their work with broader business priorities and enterprise security expectations. You will also represent security and compliance to senior leadership, customers, and external stakeholders. This opportunity offers significant autonomy to shape an AI-first security program while helping the organization scale securely and maintain customer trust. Accountabilities: As Senior Manager, Application Security, you will establish and lead the application security strategy while providing direction across IT operations and compliance. You will remain technically engaged in security initiatives while building a scalable program that supports engineering excellence, customer confidence, and business growth. - Define and own the application security roadmap, including vulnerability management, threat modeling, security reviews, and remediation processes for new features and architectural changes. - Conduct hands-on security reviews, triage vulnerabilities, collaborate with engineers on remediation, and progressively develop processes that allow the application security program to scale.

- Embed security-by-default practices throughout the software development lifecycle, including secure development standards, dependency management, secrets hygiene, and automated security scanning integrated into CI/CD pipelines. - Design and implement an AI-first application security strategy, evaluating AI-assisted code analysis, vulnerability triage, remediation agents, and automated testing while establishing appropriate validation and oversight. - Partner with engineering teams to ensure security practices strengthen development capabilities rather than create unnecessary delivery bottlenecks. - Oversee third-party and vendor security assessments, ensuring external providers meet appropriate security standards when handling sensitive customer information. - Establish zero-trust security principles and collaborate with cloud platform leadership on network security, identity and access management, security logging, and alerting. - Lead application-layer security incident response and coordinate with infrastructure teams on incidents involving cloud platforms or underlying systems. - Manage and support the Compliance Lead and IT team, providing strategic direction, prioritization, organizational context, and professional development while respecting their operational expertise. - Align application security, IT operations, and compliance under a unified strategy with shared standards, risk frameworks, and coordinated roadmaps. - Oversee cross-functional priorities involving access reviews, identity governance, endpoint security, employee onboarding and offboarding, and the connection between application security controls and compliance evidence. - Partner with compliance leadership to assess future frameworks and enterprise requirements, prioritize IT investments, and support continued compliance maturity beyond existing SOC 2 Type II certification. - Represent security posture, compliance status, and IT health to engineering leadership, enterprise customers, prospects, and auditors.