Prosper is seeking an experienced Application Security Senior Manager to lead our Application Security program. Reporting to the Head of Information Security, this role drives the strategy, implementation, and optimization of application security controls across the organization. This position requires deep technical proficiency and the leadership skills to influence technology and product teams across the organization. We are looking for smart, self-driven candidates who want to be part of an innovative FinTech company with a mission to improve the financial well-being of its customers.
🏢 About Prosper
Prosper introduced U.S. consumers to online personal loans and is now the nation's leading online lending marketplace, connecting borrowers with multiple lenders. Prosper is also a leading marketplace for investing in loans. We are growing our Technology team to support our various financial products. The ideal candidate is passionate about learning the Fintech domain and delivering cutting-edge, high-quality solutions to solve business problems. We utilize a progressive, test-driven, Agile development methodology that places a high premium on communication, teamwork, sound design and clean implementation.
🎯 The Role
This role will lead our Application Security program, driving the strategy, implementation, and optimization of application security controls across the organization. You will work closely with technology and product teams to influence security practices and ensure secure development throughout the SDLC.
✅ Key Responsibilities
Define and execute a multi-year Application Security roadmap aligned with business goals and industry best practices
Help define the secure architecture and guardrail framework for AI adoption across the company
Integrate threat modeling, security tools & testing (SAST, SCA, DAST, IAST, RASP, etc.), and secure by design processes into the SDLC (CI/CD pipeline)
Perform security architecture reviews for major product changes; conduct in-house secure code reviews and threat modeling for high-impact features and critical products.
Oversee the end-to-end AppSec vulnerability lifecycle (identification, prioritization, and remediation based on business risk, exploitability, and threat intelligence)
Direct and manage incident response for application security alerts/incidents
Lead the strategy for third party penetration tests
Deliver executive-level dashboards and reports on application security posture and risk trends
Drive continuous improvement activities, and deepen leadership awareness of product and application security risks
Collaborate with Engineering and Product leads to embed security into the SDLC and scale the Security Champions program
Direct a small team of AppSec engineers while remaining deeply hands-on in technical execution
📌 Required Qualifications
10+ years of progressive application security experience (prior software development experience preferred)
Ability to lead, manage, and develop a technical Application Security Engineering team
Great interpersonal skills, ability to foster constructive dialogue
Deep technical knowledge with a track record of successful execution in application security (secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
Strong knowledge of CI/CD pipelines, cloud-native security (GCP), and container security
Bachelor's degree in Computer Science or a related field, or its equivalent in work experience
Strong working knowledge of at least two programming or scripting languages
🎁 Benefits
A competitive salary and a 401(k) with a 5% company match to help you build long-term financial security
Holistic well-being: We provide the resources you need to thrive, from flexible time off and paid parental leave to an annual wellness allowance and comprehensive health coverage
Professional & personal growth: Take advantage of a suite of premium perks, including Udemy access, childcare assistance, pet insurance, and a bevy of additional savings through Beneplace
Salary range: $226,000 - $270,000 a year, plus bonus and generous benefits
Please let Prosper know that you found this role at devopsprojectshq.com as a way to support us, so we can keep providing you with awesome DevOps jobs.
Never miss a job
Join 2,000+ DevOps developers getting weekly alerts for remote and US/EU roles, Kubernetes, AWS, Terraform, filtered for your stack.
🔒 Need an IP to whitelist?
Get a dedicated static EU outbound IP for Banks, payments, EHRs, APIs, AI.