Application Security Program Manager
Headquartered in California, U.S.A., GSPANN provides consulting and IT services to global clients. We help clients transform how they deliver business value by helping them optimize their IT capabilities, practices, and operations with our experience in retail, high-technology, and manufacturing. With five global delivery centers and 1900+ employees, we provide the intimacy of a boutique consultancy with the capabilities of a large IT services firm.
Role:
Application Security Technical Program Manager (TPM).Type: 12-24 monthsClient’s Cybersecurity Team is seeking a highly technical contractor to own and drive application security vulnerability remediation programs, with an initial focus on HackerOne bug bounty findings, API security vulnerabilities, GraphQL authorization issues, and cross-functional remediation tracking.
The role will serve as the operational owner of the vulnerability remediation lifecycle, coordinating across Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation, assignment, remediation, and closure of security findings.
Bug Bounty Program ManagementOwn day-to-day management of the HackerOne program.
Manage vulnerability intake, triage, validation, routing, tracking, and closure.
Coordinate weekly operating reviews with HackerOne and internal stakeholders.
Track remediation commitments and drive accountability.
Manage disclosure and communication processes.
Required QualificationsMust Have:5+ years experience in: Software Engineering or Application Security
Strong understanding of: REST APIs, GraphQL, Authentication & Authorization, OAuth, JWT, OWASP Top 10, API Security Top 10.
Experience reproducing security findings.
Experience using Postman.
Experience with Jira and ServiceNow.
PreferredHackerOne or Bug Bounty experience.
Penetration testing experience.
Working at GSPANNGSPANN is a diverse, prosperous, and rewarding place to work. We provide competitive benefits, educational assistance, and career growth opportunities to our employees. Every employee is valued for their talent and contribution. Working with us will give you an opportunity to work globally with some of the best brands in the industry.
The company does and will take affirmative action to employ and advance in the employment of individuals with disabilities and protected veterans and to treat qualified individuals without discrimination based on their physical or mental disability status. GSPANN is an equal opportunity employer for minorities/females/veterans/disabled.