This role pays more than
55%
of similar roles. Most pay
$176,437–$219,275
— the shaded band above.
At the midpoint, this role pays about
$204k
versus about
$198k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1240 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 817 roles with salary data.
As a Product Security Senior Manager within the Commercial Team, you will define the practice's direction, standards, and requirements for client solutions while supporting business development through collaboration with market and sales teams. You will lead the implementation, testing, hardening, and maturing of product security programs across the full development life cycle. Your daily responsibilities include conducting interviews with leaders, developing strategies, performing hardening tasks, and educating engineering teams on cybersecurity best practices. You will also manage a team of engineers and architects to perform posture assessments and implement tools for application security. Required expertise includes experience with embedded systems, hardware environments, reverse engineering tools like Ghidra or IDA Pro, code scanning, CI/CD pipelines, and OWASP Top 10 vulnerabilities. You will solve complex problems regarding secure-by-design principles and cybersecurity assurance for diverse products.
Define product security standards and requirements for services and solutions sold to commercial customers.
Lead the implementation, testing, hardening, and maturing of product security programs for client projects.
Conduct interviews with business leaders to develop security strategies and present findings.
Educate and influence client engineering teams on cybersecurity best practices and secure-by-design principles.
Establish Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for client cybersecurity assurance goals.
Lead, hire, and manage a team of Product Security Engineers and Architects.
Perform security posture assessments of development systems to provide remediation plans and tool implementations.
What we're looking for
10+ years of experience leading teams in Product Security.
5+ years of experience with application or product development and developing, architecting, and implementing software security solutions.
3+ years of experience working on securing embedded systems, physical products, or hardware environments.
1+ years of experience with reverse engineering tools such as Ghidra or IDA Pro.
Experience managing across SDLC, including vulnerability management, code scanning tools, CI/CD pipelines, and integration into production environments.
Knowledge of OWASP Top 10 Vulnerabilities, prevention techniques, security, risk, and compliance best practices.