CrawlJobs Logo

Application Penetration Testing Senior Manager

https://www.wellsfargo.com/ Logo

Wells Fargo

Location Icon

Location:
United States , Charlotte

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

Wells Fargo is seeking an Information Security Senior Manager for our Application Security Team. Application Security enhances the ability of the development organization to consistently deliver highly functional applications that are secure and resilient against attack. We develop policies, processes, controls, and tools to proactively embed security into Wells Fargo-developed applications. The role will lead a critical application penetration testing program for the bank. It will oversee teams responsible for securing our applications and reducing the risk of data breach. The leadership role requires strong information security and offensive security foundational knowledge. The ideal candidate for this position will have demonstrated experiences leading a team, influencing, and collaborating with all levels of leadership.

Job Responsibility:

  • Manage and develop a geographically dispersed team of highly specialized individual contributors as they perform application penetration test assessments against a wide variety of technology systems and critical third parties
  • Evolve offensive capabilities in line with threats, cyber threat intelligence and the technology strategy
  • Make decisions and resolve issues regarding changes to information security policy, standards, and procedures as needed for systems, applications, and tools
  • Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
  • Oversee resource allocations to ensure commitments align with strategic objectives
  • Advise more experienced leadership or executive management on issues with high, critical impact on the company
  • Represent the organization to regulators, industry groups and governmental agencies
  • Manage, hire, and develop specialized application security penetration testers across platforms
  • Develop and guide a culture of talent development to meet business objectives and strategy
  • Maintain relationship with 3rd party vendors and escalate any issues
  • Managing and developing Application penetration testing assessment structure for AI and ML initiatives enterprise wide
  • Demonstrate foundational AI literacy by effectively using approved AI tools to support everyday work
  • Apply AI tools for activities such as research, summarization, drafting, analysis, and decision support
  • Exercise sound judgment when interpreting and using AI generated outputs
  • Understand basic AI limitations and appropriate use cases within daily workflows
  • Adhere to data privacy, security, and data handling standards when using AI tools
  • Use AI ethically and responsibly, in alignment with company policies and guidelines

Requirements:

  • 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
  • 3+ years of management or leadership experience
  • 3+ years of Penetration Testing Leadership experience
  • 1+ years of application security experience
  • 3 + years of hands-on penetration testing experience
  • 2 + years of CI/CD integration experience
  • Experience assessing AI and ML systems
  • CISSP, CISM, GWAPT, GPEN, GXPN, GMOB, BSCP, or OSCP
  • Knowledge and understanding of information security practices and policies, including information security frameworks, standards and best practices

Nice to have:

  • 3 + years of hands-on penetration testing experience
  • 2 + years of CI/CD integration experience
  • Experience assessing AI and ML systems
  • CISSP, CISM, GWAPT, GPEN, GXPN, GMOB, BSCP, or OSCP
  • Knowledge and understanding of information security practices and policies, including information security frameworks, standards and best practices

Additional Information:

Job Posted:
May 15, 2026

Expiration:
May 22, 2026

Employment Type:
Fulltime
Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Application Penetration Testing Senior Manager

Senior Application Security Engineer

As an Application Security - Senior Product Security Engineer, you will play a c...
Location
Location
United States
Salary
Salary:
157000.00 - 216000.00 USD / Year
alpha-sense.com Logo
AlphaSense
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment
  • Strong understanding of web app and API security, microservices, and containerized architectures
  • Experience integrating security tooling into modern CI/CD workflows
  • Proficiency with SAST, DAST, IaC scanning, and container security platforms
  • Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript)
  • Familiarity with AWS security, Kubernetes security, and DevSecOps best practices
Job Responsibility
Job Responsibility
  • Lead application security initiatives across all SaaS products and microservices
  • Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems
  • Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools
  • Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads
  • Drive AppSec awareness and training, developing secure coding practices and guidelines
  • Evaluate and deploy container security controls, ensuring images and orchestrators (Kubernetes, ECS, etc.) follow best practices
  • Support bug bounty and vulnerability disclosure programs and coordinate penetration testing
  • Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks
What we offer
What we offer
  • Competitive compensation, benefits, and career growth opportunities
  • Opportunity to shape and drive product security strategy
  • Collaborative and security-minded engineering culture
  • Work on cutting-edge security challenges in a fast-growing company
  • Performance-based bonus
  • Equity
  • Generous benefits program
  • Fulltime
Read More
Arrow Right

Senior Product Security Engineer

Ready to make an impact on the security of products from the ground up? Join our...
Location
Location
United States , Austin
Salary
Salary:
Not provided
take2games.com Logo
Take-Two Interactive Software, Inc.
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
  • At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
  • Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines to ensure seamless and secure software delivery
  • Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
  • Ability to translate design documents into security-focused guidelines and requirements for product development
  • Adapt quickly to new technologies, languages, and solve challenges outside your expertise
  • Travel: No routine travel required
  • occasional travel as needed.
Job Responsibility
Job Responsibility
  • Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
  • Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
  • Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
  • Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
  • Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
  • Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
  • Partner with teams to define and execute security strategy, driving security priorities across the organization
  • Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks.
What we offer
What we offer
  • Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match
  • Fitness allowance, employee discount programs, discounted games & events and stocked pantries.
  • Fulltime
Read More
Arrow Right

Senior Product Security Engineer

Join our Product Security team, where you'll partner with development and game t...
Location
Location
United States , Las Vegas
Salary
Salary:
Not provided
take2games.com Logo
Take-Two Interactive Software, Inc.
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
  • At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
  • Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines
  • Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
  • Ability to translate design documents into security-focused guidelines and requirements for product development
  • Adapt quickly to new technologies, languages, and solve challenges outside your expertise
Job Responsibility
Job Responsibility
  • Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
  • Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
  • Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
  • Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
  • Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
  • Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
  • Partner with teams to define and execute security strategy, driving security priorities across the organization
  • Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks
What we offer
What we offer
  • Medical (HSA & FSA)
  • dental
  • vision
  • 401(k) with company match
  • employee stock purchase plan
  • commuter benefits
  • in-house wellness program
  • broad learning & development opportunities
  • a charitable giving platform with company match
  • Fitness allowance
  • Fulltime
Read More
Arrow Right

Senior Security Software and System Engineer

As part of our HPE Operations Cybersecurity Lab, the Senior Security Software an...
Location
Location
Puerto Rico , Aguadilla
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive experience with multiple software systems design tools and languages
  • excellent analytical and problem solving skills
  • experience in overall architecture of software systems for products, solutions and IT systems
  • designing and integrating software systems running on multiple platform types into overall architecture
  • in-depth Cyber and IT security knowledge
  • solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
  • experience in penetration testing with tools
  • experience with web application security testing (tools: Burp, OWASP ZAP etc.)
  • experience with vulnerability assessment (tools: nmap, Nexpose or Nessus, Fierce, Wireshark etc.)
  • evaluating forms and processes for software systems testing and methodology, including writing and execution of test plans, debugging, and testing scripts and tools
Job Responsibility
Job Responsibility
  • Leads multiple security and automation project teams of other software systems engineers and internal and outsourced development partners responsible for all stages of design and development for security solutions for complex products and platforms, including solution design, analysis, coding, testing, and integration
  • design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
  • bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
  • manages and expands relationships with internal and outsourced development partners on software systems design and development
  • reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards
  • provides tangible feedback to improve product security and mitigate failure risk
  • provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities
  • direct and coordinate the implementation of test automation and other test tools
What we offer
What we offer
  • Comprehensive suite of benefits that supports physical, financial and emotional wellbeing
  • personal and professional development programs
  • unconditional inclusion in the workplace
  • Fulltime
Read More
Arrow Right

Senior Security Software and System Engineer

As part of our HPE Operations Cybersecurity Lab the Senior Security Engineer wil...
Location
Location
Puerto Rico , Aguadilla
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
  • Typically 6-10 years experience
  • Extensive experience with multiple software systems design tools and languages
  • Excellent analytical and problem solving skills
  • Experience in overall architecture of software systems for products, solutions and IT systems
  • Designing and integrating software systems running on multiple platform types into overall architecture
  • In-depth Cyber and IT security knowledge
  • Solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
  • Experience in Penetration testing with tools
  • Experience with Web Application Security Testing (Tools: Burp, OWASP ZAP etc.)
Job Responsibility
Job Responsibility
  • Leads multiple security and automation project teams of other software systems engineers and internal and outsourced development partners responsible for all stages of design and development for security solutions for complex products and platforms, including solution design, analysis, coding, testing, and integration
  • Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
  • Bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
  • Manages and expands relationships with internal and outsourced development partners on software systems design and development
  • Reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards
  • provides tangible feedback to improve product security and mitigate failure risk
  • Provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities
  • Direct and coordinate the implementation of test automation and other test tools (security)
What we offer
What we offer
  • Health & Wellbeing
  • Personal & Professional Development
  • Unconditional Inclusion
  • Fulltime
Read More
Arrow Right

Senior Security Software And System Engineer

As part of our HPE Operations Cybersecurity Lab the Senior Security Engineer wil...
Location
Location
United States , Aguadilla
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive experience with multiple software systems design tools and languages
  • Excellent analytical and problem solving skills
  • Experience in overall architecture of software systems for products, solutions and IT systems
  • Designing and integrating software systems running on multiple platform types into overall architecture
  • In-depth Cyber and IT security knowledge
  • Solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
  • Experience in Penetration testing with tools
  • Experience with Web Application Security Testing (Tools: Burp, OWASP ZAP etc.)
  • Experience with Vulnerability Assessment (Tools: nmap, Nexpose or Nessus, Fierce, Wireshark etc.)
  • Evaluating forms and processes for software systems testing and methodology, including writing and execution of test plans, debugging, and testing scripts and tools
Job Responsibility
Job Responsibility
  • Leads multiple security and automation project teams of other software systems engineers and internal and outsourced development partners responsible for all stages of design and development for security solutions for complex products and platforms, including solution design, analysis, coding, testing, and integration
  • Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
  • Bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
  • Manages and expands relationships with internal and outsourced development partners on software systems design and development
  • Reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards
  • provides tangible feedback to improve product security and mitigate failure risk
  • Provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities
  • Direct and coordinate the implementation of test automation and other test tools (security).
What we offer
What we offer
  • Health & Wellbeing
  • Personal & Professional Development
  • Unconditional Inclusion.
  • Fulltime
Read More
Arrow Right

Senior Security SW and System Engineer

As part of our HPE Operations Cybersecurity Lab the Senior Security Engineer wil...
Location
Location
United States , Aguadilla
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
  • Typically 6-10 years experience
  • Extensive experience with multiple software systems design tools and languages
  • Excellent analytical and problem solving skills
  • Experience in overall architecture of software systems for products, solutions and IT systems
  • Designing and integrating software systems running on multiple platform types into overall architecture
  • In-depth Cyber and IT security knowledge
  • Solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
  • Experience in Penetration testing with tools
  • Experience with Web Application Security Testing (Tools: Burp, OWASP ZAP etc.)
Job Responsibility
Job Responsibility
  • Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
  • Bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
  • Manages and expands relationships with internal and outsourced development partners on software systems design and development
  • Reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards
  • provides tangible feedback to improve product security and mitigate failure risk
  • Provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities
  • Direct and coordinate the implementation of test automation and other test tools (security)
What we offer
What we offer
  • Health & Wellbeing
  • Personal & Professional Development
  • Unconditional Inclusion
  • Fulltime
Read More
Arrow Right

Senior Security Software and System Engineer

As part of our HPE Operations Cybersecurity Lab the Senior Security Engineer wil...
Location
Location
United States , Aguadilla
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
  • Typically 6-10 years experience
  • Extensive experience with multiple software systems design tools and languages
  • Excellent analytical and problem solving skills
  • Experience in overall architecture of software systems for products, solutions and IT systems
  • Designing and integrating software systems running on multiple platform types into overall architecture
  • In-depth Cyber and IT security knowledge
  • Solid knowledge of security fundamentals and general security technologies, including: network security controls (firewalls, VPNs, IPSec, IDS/IPS), secure code, physical security, cryptography, authentication, identity management, network communication ports and protocols, etc.
  • Experience in Penetration testing with tools
  • Experience with Web Application Security Testing (Tools: Burp, OWASP ZAP etc.)
Job Responsibility
Job Responsibility
  • Leads multiple security and automation project teams of other software systems engineers and internal and outsourced development partners responsible for all stages of design and development for security solutions for complex products and platforms, including solution design, analysis, coding, testing, and integration
  • Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
  • Bring relevant subject matter expertise on application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
  • Manages and expands relationships with internal and outsourced development partners on software systems design and development
  • Reviews and evaluates designs and project activities for compliance with secure systems design and development guidelines and standards
  • provides tangible feedback to improve product security and mitigate failure risk
  • Provides security domain-specific expertise and overall software systems leadership and perspective to cross-organization projects, programs, and activities
  • Direct and coordinate the implementation of test automation and other test tools (security)
What we offer
What we offer
  • Health & Wellbeing
  • Personal & Professional Development
  • Unconditional Inclusion
  • Fulltime
Read More
Arrow Right