Department Manager - Application Security

This role leads CP Axtra's Application Security program, managing the end-to-end secure SDLC from policy definition to toolchain management. The manager owns SAST, SCA, DAST, and secrets scanning platforms like Checkmarx and SonarQube, ensuring they are integrated into CI/CD pipelines. Responsibilities include threat modeling, secure design reviews, and defining security quality gates. The position requires balancing enforcement with enablement to help developers ship securely without slowing them down.

Own and evolve CP Axtra's Secure SDLC framework

Manage and optimize the AppSec toolchain (Checkmarx, SonarQube, Qualys WAS, Spectral, OWASP ZAP)

Drive CI/CD pipeline security integration across GitHub Actions, Azure DevOps, and Jenkins

Lead threat modeling and secure design reviews for high-risk applications

Consult with development teams on vulnerability remediation

Define and enforce security quality gates

Manage the SAST/SCA/DAST/IaC Security Manager

Report application security posture metrics to leadership

Evaluate emerging AppSec technologies including AI-assisted code review

Coordinate with the Offensive Security team

5+ years in application security — secure SDLC, code review, vulnerability management, or AppSec tooling management

Hands-on experience with at least 2 of: SAST, SCA, DAST, or secrets scanning tools

Strong understanding of CI/CD pipelines and how to integrate security checks

Ability to review code for security issues in at least 2 programming languages

Experience leading or mentoring a team

Excellent communication skills

Understanding of OWASP Top 10, SANS Top 25, and modern application attack patterns