Senior Application Security Engineering Manager

We’ve signed up to an ambitious journey. Join us!

As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better, together.

The Role

We at Arrive are seeking a Senior Application Security Engineering Manager with a passion for platform engineering and a knack for nurturing talent.

We're looking for a highly skilled leader to guide our team of Application Security engineers as we provide platform services to over 50 global engineering teams working at Arrive. Our security services are designed to empower all our engineers to incorporate security into all aspects of software engineering with a strong emphasis on shift left.

You'll blend your deep technical proficiency with strong cross functional collaboration skills working closely with the CISO on setting the strategy and policy for application security. Come thrive in a collaborative, supportive, and inclusive environment where your contributions are truly valued.

Key responsibilities

• Build and lead a team of application and cloud security engineers who develop solutions used across the development lifecycle

• Collaborate with the Chief Information Security Officer’s office on application security strategy

• Facilitate security governance meetings for the Engineering organization, including risk and vulnerability management

• Act as the head of product management for the team, providing overall direction for the Platform Security team’s offerings to the company and delegating responsibility where appropriate for specific areas of the product roadmap

• Collaborate with the architecture team on tool selection and procurement

• Partners with key vendors to develop shared roadmaps for product adoption

• Lead, mentor, and support a team of talented App Sec and Cloud Sec engineers, fostering engagement, motivation, and continuous learning

• Set clear expectations and cultivate a positive, accountable work environment in partnership with engineering and management.

• Manage career development, including performance evaluations, promotions, and identifying training needs.

• Drive a vibrant team culture that champions collaboration, innovation, and continuous improvement.

• Manage the private bug bounty program and support penetration testing efforts
  Grow the security community within the Product & Technology organization, including leading the security guild and other activities and events that foster awareness and continuous improvement of security practices within the organization

Requirements

• Strong understanding of key application security and engineering principles and practices

• Prior experience leading a platform team, including maintaining the roadmap, partnering with internal teams on feature requests and issue resolution

• Hands-on experience with application security tools such as SAST, DAST, SCA, IAST, RASP, and image scanning

• Knowledge of network controls such as Web Application Firewalls and cloud-native network security capabilities used

• Working knowledge of CNAPP and runtime security tools and processes and experience leveraging them at scale

• Experience with compliance and certification, including but not limited to PCI-DSS, ISO-27001, SOC1, TX-RAMP, GDPR, CCPA