Sr. Engineering Manager, Application Security

About the role

Oversee the development of paved roads, libraries, and guardrails that make it easier for our developers to commit, test, build, deploy, and operate code securely by default.
Build and maintain the threat modeling, design review, and vulnerability management programs that protect our customers, our employees, and the business.
Drive the adoption of AI across AppSec operations to achieve scaled security workflows, creating leverage for senior engineers.
Lead and mentor engineers on Betterment’s senior-leaning AppSec squad.
Establish strong lines of communication with stakeholders across engineering, product, legal, compliance, and risk to understand and deeply support the needs of teams building products across all business lines and divisions of Betterment.
Inspire and maintain a strong, equitable engineering culture founded on transparency, inclusivity, mentorship, and collaboration.
Continuously innovate and seek out ways to meet the near- and long-term strategic security needs of our complex org.

Responsibilities

• Oversee the development of paved roads, libraries, and guardrails that make it easier for our developers to commit, test, build, deploy, and operate code securely by default.
• Build and maintain the threat modeling, design review, and vulnerability management programs that protect our customers, our employees, and the business.
• Drive the adoption of AI across AppSec operations to achieve scaled security workflows, creating leverage for senior engineers.
• Lead and mentor engineers on Betterment’s senior-leaning AppSec squad.
• Establish strong lines of communication with stakeholders across engineering, product, legal, compliance, and risk to understand and deeply support the needs of teams building products across all business lines and divisions of Betterment.
• Inspire and maintain a strong, equitable engineering culture founded on transparency, inclusivity, mentorship, and collaboration.
• Continuously innovate and seek out ways to meet the near- and long-term strategic security needs of our complex org.

Requirements

Expertise across the application security stack: secure SDLC, threat modeling, secure design review, code review, vulnerability management, and the cloud-native ecosystem (AWS, containers, Kubernetes, CI/CD).

Qualifications

• Experience with hands-on managing, mentoring, and inspiring a team of talented security engineers, including senior engineers.
• Demonstrated success as a true player-coach is a must.
• Experience establishing or scaling a Security Champions or distributed threat modeling program, with a focus on empowering engineering squads to own security outcomes and integrating these practices into the existing software development lifecycle.
• Experience leading execution of large team initiatives and execution of smaller concurrent projects in partnership with senior engineers.
• Familiarity with AI-assisted security tools and a curiosity for exploring how AI can enhance both security workflows and the security posture of the AI-powered features our engineers are building.
• A real passion for application security and for empowering developers to do the right thing easily.
• Experience collaborating with other engineering teams, product managers, subject matter experts, and non-technical stakeholders such as legal, compliance, and risk.

Skills

• Expertise across the application security stack: secure SDLC, threat modeling, secure design review, code review, vulnerability management, and the cloud-native ecosystem (AWS, containers, Kubernetes, CI/CD).
• Experience with hands-on managing, mentoring, and inspiring a team of talented security engineers, including senior engineers.
• Demonstrated success as a true player-coach is a must.
• Experience establishing or scaling a Security Champions or distributed threat modeling program, with a focus on empowering engineering squads to own security outcomes and integrating these practices into the existing software development lifecycle.
• Experience leading execution of large team initiatives and execution of smaller concurrent projects in partnership with senior engineers.
• Familiarity with AI-assisted security tools and a curiosity for exploring how AI can enhance both security workflows and the security posture of the AI-powered features our engineers are building.
• A real passion for application security and for empowering developers to do the right thing easily.
• Experience collaborating with other engineering teams, product managers, subject matter experts, and non-technical stakeholders such as legal, compliance, and risk.

Benefits

At Betterment, security is foundational to the trust our customers place in us with their financial lives. Our Application Security squad empowers and enables the entire engineering organization and works closely with product and platform teams to deliver controls, tooling, and partnerships that let us deliver value to Betterment’s customers and clients without compromising on safety.

Pay

New York City: $210,000-250,000

Schedule

This role is based out of our NYC office.