Senior Manager, Application Security

About the role

A partner company is recruiting a Senior Manager, Application Security based in Estonia, to lead a dedicated application security function in a fast-growing, fully remote technology environment. The role combines hands-on security expertise with people management, strategic planning and cross-functional collaboration, and offers significant autonomy to shape an AI-first security program.

Key responsibilities

• Define and own the application security roadmap, including vulnerability management, threat modeling, security reviews and remediation processes.
• Conduct security reviews, triage vulnerabilities and work with engineers on remediation; embed security-by-default practices, including dependency management, secrets hygiene and automated scanning in CI/CD.
• Design an AI-first security strategy, evaluating AI-assisted code analysis, vulnerability triage, remediation agents and automated testing.
• Oversee third-party and vendor security assessments, and establish zero-trust principles with cloud platform leadership on network security, IAM, logging and alerting.
• Lead application-layer incident response and coordinate with infrastructure teams on cloud-related incidents.
• Manage and support the Compliance Lead and IT team, and align application security, IT operations and compliance under shared standards and risk frameworks.
• Represent security posture, compliance status and IT health to engineering leadership, customers, prospects and auditors, and own the security questionnaire and due diligence process.

Required profile

• At least 7 years of security experience, including substantial hands-on application security work.
• Demonstrated success building or maturing an application security program, including security reviews, threat modeling, vulnerability management and penetration testing follow-up.
• Ability to read application code, evaluate modern web and API architectures and work directly with engineers.
• At least 2 years of people management experience, including coaching and prioritizing specialists.
• Regular use of AI agents and AI-assisted security tools, with judgment on what can be safely automated.
• Strong strategic communication skills and a collaborative leadership style.

Required skills

• Secure software design, OWASP principles and common application vulnerabilities.
• Nice to have: Okta, Snyk, Wiz, Cloudflare, SOC 2, ISO 27001, GDPR, and experience with enterprise security questionnaires.

What we offer

• Annual base salary of $177,000 to $240,000 depending on location and experience.
• Fully remote work, with location eligibility subject to geographic and regulatory restrictions.
• Significant autonomy, direct access to engineering leadership and a dedicated security program with executive support.