Senior Manager, Application Security

Description

Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission‑critical organizations to work smarter, faster, and more securely.

We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.

When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.

We are seeking a Senior Manager, Application Security to join our team. This is a hybrid opportunity based out of our Waltham, MA office.

Job Summary

The Senior Application Security Manager is a leader within Imprivata’s Application Security and Privacy function. This role protects the Imprivata brand and customer trust by reducing product security risk, improving security maturity across the software development life cycle, and ensuring that Imprivata’s products meet the expectations of customers, auditors, and security‑conscious buyers.

The Senior Application Security Manager will operate as a senior technical leader and coach, partnering closely with engineering, product management, Dev Ops, quality engineering, corporate security, and privacy stakeholders.

Duties and Responsibilities

• Lead and scale the application security program across products, embedding secure‑by‑design and shift‑left practices throughout the SDLC.
• Manage, mentor, and set direction for the App Sec team, including priorities, goals, and operating cadence.
• Act as a senior technical authority on secure architecture, coding, threat modeling, vulnerability management, and remediation.
• Define and drive the roadmap for App Sec tooling and automation, including implementation, adoption, and optimization.
• Integrate security controls into engineering workflows, CI/CD pipelines, code reviews, and release processes.
• Oversee penetration testing programs, validate findings, and ensure timely, accountable remediation.
• Develop and report on App Sec metrics, dashboards, and executive‑level insights on risk and program maturity.
• Promote security awareness through training, guidance, and active engagement with engineering and product teams.
• Support incident response and investigations, providing leadership on containment, root cause, and corrective actions.
• Collaborate cross‑functionally and act as a player‑coach, influencing leaders while balancing strategic direction with hands‑on execution and staying current on emerging threats.
• Other duties as assigned and required.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Systems, or a related technical discipline.
• 8+ years of relevant experience in application security, product security, or software security, including 2+ years leading and developing a team.
• 3+ years of prior software development, software quality, Dev Ops, security engineering, penetration testing, or similarly technical experience that enables credible partnership with engineering teams.
• Demonstrated experience leading or scaling an application security program in a product or software‑driven environment.
• Deep working knowledge of secure SDLC practices, vulnerability management, threat modeling, code review concepts, application security testing methodologies, and remediation prioritization.
• Experience implementing and operating App Sec tools such as SAST, DAST, SCA, secrets scanning, container or IaC scanning, API security tooling, or related developer‑facing security platforms.
• Strong written and verbal communication skills, including the ability to present security…