Senior Manager, Cyber Security Product Manager, AppSec

Capital One Financial

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
McLean, VASan Jose, CARichmond, VANew York, NYPlano, TXRiverwoods, IL
Salary
$229,900–$262,400 / yr
Employment
Full-time
Posted
6 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $196k
This role $246k
$146k most similar roles pay here $275k

This role pays more than 92% of similar roles. Most pay $175,001–$216,075 — the shaded band above. At the midpoint, this role pays about $246k versus about $196k for comparable roles.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 1743 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 947 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Senior Manager, Cyber Security Product Manager, AppSec

Senior Manager, Cyber Security Product Manager, AppSec joins the cybersecurity team to drive governance, capability maturation, and risk transformation. This role involves owning a multi-year product roadmap for Application Security aligned with enterprise risk appetites and the evolving threat landscape. You will serve as the primary liaison to Engineering teams to translate security requirements into scalable developer workflows while evaluating tools like SAST, DAST, and SCA. Key responsibilities include defining strategies for AI-application security, including prompt engineering guardrails and automated remediation pipelines, alongside establishing governance models for vulnerability disposition. The role requires expertise in cloud-native environments involving APIs, Web, Mobile, Containers, IaC, and CI/CD. You will manage the software supply chain and address OWASP Top 10 risks while translating complex technical findings into actionable reports for executive leadership to ensure informed decision-making across the organization.

What you'll do

  • Own the multi-year product roadmap for Application Security aligned with enterprise risk appetites.
  • Translate security requirements into scalable, fix-first developer workflows in partnership with engineering teams.
  • Lead the strategic evaluation of AppSec tools like SAST, DAST, and SCA to maximize ROI.
  • Define the product strategy for AI application security, including guardrails and automated remediation pipelines.
  • Evangelize the AppSec mission through community forums and simplify complex risks for executive leadership.
  • Establish governance models for vulnerability disposition, ensuring clear SLAs and audit trails.

What we're looking for

  • At least 7 years of experience in cybersecurity or information technology.
  • At least 6 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities.
  • At least 3 years of application security experience.
  • 4+ years in Application or Product Security or Software Engineering with an emphasis on AppSec and vulnerability management strategy (preferred).
  • 4+ years of experience managing AppSec products in a large-scale enterprise (preferred).
  • Professional certifications such as CISSP, CISM, or OSCP (preferred).
  • Experience in cloud-native environments, OWASP Top 10, and software supply chain security (preferred).
  • Bachelor's Degree.

More like this

Similar roles

Senior Product Manager, AppSec

Capital One Financial

McLean, VA +4 72 days ago
AppSec SAST DAST SCA DevSecOps CI/CD OWASP Top 10 Prompt Engineering Penetration Testing Vulnerability Management Cloud-native APIs Containers Software Supply Chain Security
6+ yrs exp

Senior Director, Cyber Security Product Manager

Capital One Financial

McLean, VA +3 3 days ago $314,800–$359,300
Cybersecurity NIST CSF MITRE ATT&CK CMMC FedRAMP Multi-cloud Splunk Crowdstrike Qualys AWS Security Hub Threat Intelligence Control Automation
10+ yrs exp

Manager, Cyber Security Product Owner

Capital One Financial

McLean, VA +3 2 days ago $197,300–$225,100
Cybersecurity WAF Bot Management DDoS Mitigation NIST CSF MITRE ATT&CK CMMC FedRAMP Multi-cloud Splunk Crowdstrike Qualys AWS Security Hub Risk Management Threat Intelligence Incident Analysis RFI/RFP
5+ yrs exp

Senior Product Manager, Endpoint Security

Capital One Financial

McLean, VA +3 51 days ago
Endpoint Security SIEM XDR AWS JIRA CISSP CISM CCSP SAFe PMP CSPO GIAC SOX PCI SOC Telemetry Forensics Malware Protection Software Supply-Chain Security
6+ yrs exp

Application Security Senior Manager

Booz Allen Hamilton

Annapolis Junction, MD +3 67 days ago
Application Security SAST DAST IAST SCA CI/CD Threat Modeling OWASP Top 10 NIST Vulnerability Management SDLC AI Scanning Mythos Frontier AI Code Scanning
10+ yrs exp

Senior Product Security Manager

Booz Allen Hamilton

Washington, DC +7 5 days ago $142,900–$266,000
Product Security SDLC CI/CD OWASP Top 10 NIST Ghidra IDA Pro Vulnerability Management Fuzzing Penetration Testing Reverse Engineering Code Scanning Hardening AI Models
10+ yrs exp