Product Security Technical Manager

Vantor is forging the new frontier of spatial intelligence to help decision makers and operators understand current and future events. The Product Security Technical Manager will lead product security efforts by managing application security programs, partnering with engineering teams, strengthening security across the CI/CD and cloud environments, supporting incident response, and mentoring technical teams.

Responsibilities:

• Manage the application security team members and coordinate between developers, cloud, and cybersecurity compliance
• Develop and manage a secure coding program in partnership with software developers, engineering leaders, and product teams; establish secure coding guidance, standards, training, code review practices, and risk-based remediation processes
• Integrate, deploy, configure, and maintain application and cloud security scanning tools, including Wiz Code and related technologies; improve security throughout the software development lifecycle by embedding security checks and feedback into CI/CD pipelines
• Analyze security findings, assist teams with root-cause analysis, and provide practical remediation recommendations
• Help define application security metrics, reporting, and risk-management processes
• Participate in cybersecurity incident response activities, including investigation, evidence analysis, containment support, root-cause analysis, and lessons learned
• Research emerging vulnerabilities, attack techniques, security tools, and defensive practices relevant to Vantor’s applications and infrastructure
• Support application security assessments, threat modeling, vulnerability management, and security reviews as needed
• Mentor engineers and security professionals on secure design, coding, testing, and operational practices; build strong working relationships across software engineering, DevOps, cloud infrastructure, IT, cybersecurity, compliance, and security operations teams
• Promote a practical, risk-based security culture that enables engineering teams to build and deliver secure software efficiently

Requirements:

• To be eligible for this position, you must be a U.S. Person, defined as a U.S. citizen, permanent resident, Asylee, or Refugee
• Must be a U.S. Citizen
• Bachelor's degree in cybersecurity, computer science, information technology, or a related field; equivalent professional experience may be considered
• 7 or more years of experience in cybersecurity, application security, product security, security engineering, or a related discipline
• Demonstrated experience managing secure coding and application security programs
• Experience deploying and maintaining security scanning tools within software development and CI/CD environments
• Familiarity with application security testing techniques, including static analysis, software composition analysis, secrets detection, container security, infrastructure-as-code scanning, and cloud security assessment
• Hands-on experience supporting cybersecurity incident response and investigations
• Competency in modern AI tools and proper application towards incident investigation, summarization, and vulnerability remediation
• Working knowledge of software development practices, source control, CI/CD pipelines, development frameworks, and modern IDEs
• Ability to write or modify scripts for automation, analysis, testing, and security operations
• Strong understanding of common vulnerabilities and secure software design principles
• Ability to communicate technical risks and recommendations clearly to developers, engineering leaders, and other stakeholders
• Demonstrated ability to mentor others and influence teams