Senior Manager of Application Security

About the Position

We're seeking a Senior Manager of Application Security to lead Miro's global team in embedding security into the software development lifecycle.

About the Role

As Senior Manager of Application Security, you will define and operationalize Miro’s application security strategy in alignment with our industry-leading software development lifecycle and AMPED framework. You will lead a multidisciplinary team of application security engineers and offensive security specialists who work directly with developers, product teams, and platform engineering across multiple regions.

You will embed security into all phases of the product lifecycle-from early discovery and architecture threat modeling, to design reviews and secure delivery pipelines, and ongoing monitoring and testing post-release. Your team will also support Miro’s AI-driven development tooling and guide secure adoption of Agentic AI workflows, which enable both developers and security teams to collaborate more efficiently and proactively.

The role requires a pragmatic, hands-on leader who thrives in fast-moving environments and has a deep understanding of both software engineering and security, as well as a passion for empowering teams to build securely and autonomously.

Responsibilities

• Lead and mentor a globally distributed team of security engineers focused on application security, offensive testing, secure architecture, and vulnerability remediation.
• Lead and coordinate the team's initiatives and help provide project management leadership to the team members.
• Coordinate cross function and cross stream initiatives and projects.
• Drive integration of security into Miro’s Discover, Define, Deliver lifecycle through the lens of the AMPED Ways of Working and Operating Model.
• Collaborate with Product, Engineering, and Design to ensure security is considered at the earliest stages of ideation-via threat modeling, risk reviews, and abuse-case analysis.
• Shape and evolve Miro’s Secure SDLC practices, integrating security seamlessly into CI/CD pipelines, infrastructure-as-code, and developer tooling.
• Oversee execution of bug bounty and third-party testing programs, ensuring vulnerabilities are triaged, communicated, and remediated effectively.
• Build and scale Miro’s Security Champions program to embed security ownership within each engineering team.
• Guide secure adoption of AI-augmented software development tools, including LLMs used for code generation, reviews, or architectural assistance.
• Help envision and safely operationalize Agentic AI-driven developer and security workflows, including policy-driven autonomous agents supporting security automation and decision-making.
• Provide structured guidance, patterns, and reference architectures that support developers in implementing secure, scalable, and privacy-respecting features.
• Define and report on KPIs and success metrics for secure development adoption, vulnerability resolution, and developer engagement.
• Collaborate with Privacy, Legal, and Compliance teams to ensure alignment with regulatory requirements (ISO 27001, SOC 2, GDPR, and emerging AI regulations).
• Foster a strong team culture based on collaboration, learning, and continuous improvement.

Requirements

• 10+ years of experience in software, application, or product security, including significant experience in secure software development.
• 3+ years of technical leadership or management experience in a security-focused role.
• Extensive experience with threat modeling methodologies (e.g., STRIDE, PASTA) and risk assessment, particularly within a SaaS or product-centric organization.
• Deep expertise in Secure Software Development Lifecycles (SSDLC), including integrating security into agile and custom development frameworks.
• Demonstrated experience running Security Champions programs and scaling developer engagement.
• Experience leading offensive security programs (penetration testing, red teaming, bug bounty).
• Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.
• Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations.
• Experience working with AWS and securing API-driven, microservice-based architectures.
• Ability to manage distributed teams and communicate effectively across technical and business stakeholders.

Nice to Have

• Developer Engagement
• Security Champions Program
• AI-driven Development Tools
• Agentic AI Workflows
• Regulatory Compliance

We Offer

• Global benefits package generally includes equity, a wellbeing benefit, a WFH equipment allowance, and an annual Learning & Development stipend.
• Join a diverse team where you can do your best work. Full benefits may differ per location.

About the Company

Miro is a visual workspace for innovation that enables distributed teams of any size to build the next big thing. The platform's infinite canvas enables teams to lead engaging workshops and meetings, design products, brainstorm ideas, and more. Miro, co-headquartered in San Francisco and Amsterdam, serves more than 100M users and 250,000 companies collaborate in the Innovation Workspace. Miro was founded in 2011 and currently has more than 1,600 employees in 13 hubs around the world.

We are a team of dreamers. We look for individuals who dream big, work hard, and above all stay humble. Collaboration is at the heart of what we do and through our work together we hope to create a supportive, welcoming, and innovative environment. We strive to play as a team to win the world and create a better version of ourselves every day. If this sounds like something that excites you, we want to hear from you!

Check out more about life at Miro:

• Youtube
• Blog
• Instagram

Miro handles and uses personal data of job applicants in line with its Recruitment Privacy Policy found here.

How We Hire

• Recruiter Screen: A 30-min interview to discuss your relevant skills, perspective on resilience, experience, and what motivates you to join Miro.
• Hiring Manager: The hiring manager will meet to discuss your experience and fit for the role by assessing whether you align with the Miro Mindset (Curiosity, Drive, Resilience, Empathy, Cognitive Agility & Accountability). This interview usually takes 90-120 minutes.
• Skill Assessment: An interactive presentation to see your skills in action, based around a particular case study or business problem.
• Meet the Team: Here you will meet cross-functional stakeholders, and we will ask evidence-based questions to evaluate how well you align with the role and Miro's values and culture.
• Leadership Round: Meet a member of the leadership team to discuss Miro’s company values and share your vision for success at Miro.

Similar Jobs

• Senior Network Site Reliability Engineer
• Senior Threat Detection Engineer - Intelligence