Senior Manager, Application Security

Live View Technologies seeks a Senior Manager, Application Security to own product security end-to-end across its physical and digital architecture.

• Directly manage and mentor current App Sec engineers; hire and onboard 1–2 additional security engineers.
• Launch and scale a cross-functional Security Champions program across engineering squads.
• Set architecture and standards for LVT’s full attack surface, spanning a multi-tenant cloud platform, partner APIs, mobile clients, computer vision pipelines, and solar-powered edge firmware.
• Hold a standing seat in product design and planning; convert security risks into prioritized backlog items owned and shipped by engineering teams.
• Make threat modeling a core practice for squads: train teams on fundamentals while staying hands-on for high-stakes system designs and edge or hardware boundaries.
• Define, enforce, and test tenant boundaries across platform services; deploy automated checks to prevent cross-tenant data leaks from reaching production.
• Embed security into CI/CD as code, including SAST
  , SCA
  , secrets detection, and IaC policy
  , with developer feedback in minutes, low noise, and clear build-break rules.
• Partner with hardware and embedded teams on device boot security, signed OTA update pipelines, edge credential management, and threat models assuming physical access.
• Protect AI vision models, prompt boundaries, and data pipelines against abuse with privacy-by-design in a regulated, publicly scrutinized environment.
• Define guardrails for AI coding agent usage so AI-generated code meets standards for safety, testing, and architecture.
• Translate product security controls into audit evidence for SOC 2,
  GovRAMP
  , FedRAMP
  , and CJIS using native engineering workflows instead of manual compliance work.
• Oversee external vulnerability intake, triage, and coordinated disclosure through VDP/bug bounty
  ; lead engineering response to product security incidents.
• Partner with Sec Ops to instrument telemetry for authorization failures and edge abuse, turning incident learnings into root-cause controls.

• 10+ years in App Sec or product security, including significant hands-on engineering time.
• 4+ years as a people manager or formal technical lead.
• Fluency in at least one language in the stack (e.g.,
  Python
  , Go
  , Type Script/Node
  , C/C++), with ability to build custom automation, tooling, and CI integrations.
• Deep technical grounding in multi-tenant authorization
  , zero-trust architectures
  , and API security at scale.
• Familiarity with IoT
  , embedded platforms, hardware security modules, or OTA update validation, or proven ability to quickly master physical attack surfaces.
• Understanding of model supply chain risks, data handling during inference, and security reviews for AI-augmented features.
• Measures success by coverage
  , adoption
  , defect recurrence
  , and remediation velocity
  .
• Based onsite at headquarters in American Fork, Utah
  .

• Python, Go, Type Script/Node, C/C++
• CI/CD, SAST, SCA, IaC
• OTA
• SOC 2, GovRAMP, FedRAMP, CJIS

• Comprehensive health, dental and vision coverage
• Retirement benefits (401k match up to 4%)
• Flexible PTO

• Application security at LVT is not a late-stage gate; it is built into product delivery.
• LVT operates a multi-tenant cloud platform, AI-driven video analytics, and license plate recognition pipelines.
• Thousands of solar-powered units are deployed across remote utility sites and retail parking lots.
• Reporting to the Director, Security Engineering, you will own product security end-to-end across physical and digital architecture.
• Player-coach scope: manage and mentor existing App Sec engineers, hire 1–2 additional security engineers, and launch a Security Champions program across product teams.
• This role is full-time a…