Product Security Manager - Security Testing & Assurance

Product Security Manager - Security Testing & Assurance

Description -

Job Title

Product Security Manager - Security Testing & Assurance

Role Summary

HP Cybersecurity is seeking a Product Security Manager to lead Security Testing Services (STS) across HP products, platforms, and services.

This role is primarily responsible for driving execution, quality, and scale of security testing engagements, ensuring vulnerabilities are identified, assessed, and remediated prior to release. In parallel, the role ensures that cross-functional processes-including Security Review Services (SRS) and software integrity controls (e.g., signing and verification)-operate efficiently and consistently to support secure product delivery.

You will act as a central leader ensuring STS execution is tightly integrated with SRS and release readiness controls, enabling a streamlined and risk-based product security lifecycle.

Key Responsibilities

Primary: Security Testing Services (STS) Leadership

• Lead and manage end-to-end execution of Security Testing Services (STS) across applications, APIs, and product platforms
• Oversee and ensure quality of testing activities including:
  • Manual penetration testing
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
• Ensure testing coverage is aligned to risk, architecture, and threat exposure
• Drive consistency in testing methodologies, reporting, and validation
• Manage STS pipeline to ensure timely execution and delivery of security testing outcomes

Integration with Security Review Services (SRS)

• Ensure alignment between SRS and STS
• Maintain alignment between SRS intake, STS execution, and remediation tracking

Integration with Code Signing

• Ensure alignment among STS, SRS, and code signing policies

Vulnerability Management & Testing Outcomes

• Ensure vulnerabilities identified through STS are:
  • Accurately prioritized based on risk
  • Clearly documented and communicated to stakeholders
• Drive enforcement of remediation timelines per HP policy
• Ensure Critical and High vulnerabilities are addressed prior to production release
• Escalate risks or delays through appropriate channels

Cross-Functional Leadership

• Act as a subject matter expert on technologies and processes:
  • STS
  • SRS
  • Code signing

What a Product Security Manager Does at HP

• Leads teams performing manual and automated security testing across diverse HP products and platforms
• Ensures testing results directly translate into risk reduction and secure release decisions
• Drives operational excellence across the product security testing lifecycle

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field
• Combined 8+ years of experience in cybersecurity and software development including:
  • Application or product security
  • Application or product performance or validation analysis
  • Hands-on security testing or vulnerability management
  • Code signing and verification methodologies
• 3+ years of leadership or program management experience
• Strong expertise in:
  • Security testing methodologies
  • Application or product testing or analysis
  • Security architecture analysis
  • Vulnerability lifecycle management
• Working knowledge of:
  • Software integrity concepts (e.g., verification, signing, supply chain controls)
• Experience with security testing tools (e.g., Burp Suite, code analysis platforms)

Preferred Qualifications

• Experience securing web applications, APIs, cloud-native systems, or platform software
• Relevant certifications (CISSP, OSCP, or equivalent)

Key Skills

• STS leadership and execution
• STS program management and delivery
• Cross-functional process coordination (SRS, STS, code signing, engineering, release teams)
• Vulnerability risk management
• Secure software delivery and integrity awareness

Why Join HP Cybersecurity

• Lead core security testing capabilities (STS) that directly impact product release decisions
• Drive alignment across intake, testing, and release processes at scale
• Influence how HP ensures secure, reliable, and trusted product delivery
• Collaborate with leading engineers, architects, and security teams across the company

The pay range for this role is $130,700 to $205,200 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience.

Benefits:

HP offers a comprehensive benefits package for this position, including:

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• Generous time off policies, including;
• 4-12 weeks fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave (US benefits overview)

The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.

Job -
Data & Information Technology

Schedule -
Full time

Shift -
Shift 1, 0% premium (United States of America)

Travel -

Relocation -
No
Equal Opportunity Employer (EEO) -

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: "Know Your Rights: Workplace Discrimination is Illegal"