Product Security Senior Manager

Overview Product Security Senior Manager The Opportunity: Grow and develop Booz Allen's Product Security practice, part of the Commercial Team. Help define the Product Security team's direction, standards, and requirements for services and solutions sold to Booz Allen Commercial customers. You will collaborate with key stakeholders from the market and sales teams to help drive the sales process. In addition to helping enable business development, you will help deliver across client projects by leading the implementation, testing, hardening, and maturation of product security programs. You will conduct interviews with business and technology leaders, develop strategies, conduct testing, perform and advise on hardening tasks, and present findings. You will educate and influence client software and product engineering teams on cybersecurity best practices. You will assist clients in establishing KPIs and KRIs relevant to their product and market goals around cybersecurity assurance. Work proactively with leaders across all levels to design, implement, and support solutions that ensure a secure-by-design and best-practice approach across the full product development life cycle. You will also lead, hire, and inspire teams of Product Security Engineers and Architects to perform security posture assessments of development and operational systems, provide recommendations and remediation plans, and implement tools, technologies, and processes that enhance the security of applications and products. Responsibilities Lead teams in Product Security and manage security programs across development lifecycles. Oversee application development security, including designing, architecting, and implementing software security solutions. Secure embedded systems, physical products, or hardware environments. Utilize reverse engineering tools such as Ghidra or IDA Pro. Manage across SDLC with vulnerability management considerations and modern development tools and frameworks. Develop and secure software with code scanning tools and CI/CD pipelines; integrate products and solutions into production. Apply knowledge of OWASP Top 10 vulnerabilities and prevention techniques; follow security, risk, and compliance best practices. Travel up to 50% of the time. Obtain and maintain a Public Trust or Suitability/Fitness determination as required by clients. Hold a Bachelor’s degree. Nice If You Have Experience designing and implementing anti-tampering protections for products. Experience with fuzzing, firmware or product penetration testing, and hardening. Knowledge of reverse engineering and penetration testing techniques. Knowledge of security frameworks such as OWASP and NIST. Ability to build collaborative relationships and influence without authority. Vetting Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client. Compensation At Booz Allen, we celebrate contributions, provide opportunities and choices, and support total well-being. Benefits include health, life, disability, financial, and retirement offerings, paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and demonstration of our values. Full-time and part-time employees working at least 20 hours per week are eligible for Booz Allen benefit programs. This posting will close within 90 days from the Posting Date. Salary is determined by various factors including location, education, knowledge, skills, competencies, experience, contract-specific affordability, and organizational requirements. The projected compensation range is $142,900 to $266,000 (annualized USD). The estimate represents a typical salary range and is only one component of Booz Allen’s total compensation package. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is part of our daily work at Booz Allen, and we are committed to responsible and ethical use of AI tools. The use of artificial intelligence (AI) or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes collaboration, whether in person or virtually. Employees working virtually are generally expected to have their cameras on during meetings. Remote : There may be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid : You will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite : Work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Phase2 Technology