Senior Product Manager, AppSec

Capital One Financial

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VASan Jose, CARichmond, VANew York, NYPlano, TX
Employment
Full-time
Posted
95 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $201k
$159k $243k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $177,250–$224,500.

Based on 240 similar postings.

Employer

About Capital One Financial

Capital One Financial is a bank holding company specializing in credit cards, auto loans, banking, and savings products, known for its data-driven approach to consumer and commercial finance. Industry: Financial Services & Banking

Capital One Financial currently has 2107 open roles on FindRole.

Listed pay typically runs $197,300–$225,100 across 1107 roles with salary data.

Most-posted roles

View all roles at Capital One Financial

At a glance

TL;DR · Senior Product Manager, AppSec

The Senior Product Manager, AppSec joins the security testing service area to drive the strategy for application security scanning tools with a shift-left mindset. This role involves defining the multi-year product roadmap, managing the lifecycle of security products, and establishing governance models for vulnerability disposition. You will act as a primary liaison to engineering teams to translate security requirements into scalable, fix-first developer workflows while evaluating tools like SAST, DAST, and SCA. Key responsibilities include defining strategies for AI-application security, including prompt engineering guardrails and automated remediation pipelines. You will utilize technical knowledge of DevSecOps, cloud-native environments, APIs, Containers, IaC, and CI/CD to solve complex security problems. The role requires balancing enterprise risk appetites with a focus on improving the developer experience.

What does a Product Manager earn in Virginia?

Median $176450 from 159 postings across 6 companies.

See salary data

What you'll do

  • Own the multi-year product roadmap for Application Security to align with enterprise risk appetites.
  • Translate security requirements into scalable, fix-first developer workflows in partnership with engineering teams.
  • Lead the strategic evaluation of SAST, DAST, and SCA tools to maximize ROI.
  • Define the product strategy for AI-application security, including guardrails and automated remediation pipelines.
  • Establish the governance model for vulnerability disposition, including SLAs, audit trails, and exception workflows.
  • Conduct weekly empathy interviews and surveys to incorporate developer pain points into the product strategy.
  • Evangelize the AppSec mission to executive leadership by simplifying complex technical risks for informed decision-making.

What we're looking for

  • High School Diploma, GED, or equivalent certification.
  • At least 6 years of experience in cybersecurity or information technology.
  • At least 3 years of experience translating cybersecurity strategy and analysis into product requirements.
  • At least 3 years of application security experience.
  • Bachelor's degree in Computer Science (preferred).
  • 4+ years in Application or Product Security or Software Engineering with an emphasis on AppSec and vulnerability management strategy (preferred).
  • 4+ years of experience managing AppSec products in a large-scale enterprise (preferred).
  • Work authorization .

More like this

Similar roles

Senior Manager, Cyber Security Product Manager, AppSec

Capital One Financial

McLean, VA +5 29 days ago $229,900–$262,400
Application Security SAST DAST SCA CI/CD IaC OWASP Top 10 Vulnerability Management Penetration Testing Threat Intelligence Cloud-Native APIs Containers Prompt Engineering CISSP CISM OSCP
7+ yrs exp

Senior Product Manager, Email Security

Cloudflare, Inc

Austin, TX +2 46 days ago
Zero Trust Email Security Cloud-Native Machine Learning API M365 Google Workspace CASB DLP Threat Intelligence Data Security Cloud Infrastructure
7+ yrs exp Hybrid

Senior Product Manager, Agentic Security

Okta Inc

Bellevue, WA +3 89 days ago $169,000–$232,100
Agentic Security MCP Auth0 OAuth 2.0 OpenID Connect SSO MFA RBAC OWASP Top 10 IAM CIAM Agile Prompt Injection Product-Led Growth GDPR CCPA SOC 2
5+ yrs exp Hybrid

Senior Product Manager, Agentic Security

Okta Inc

Bellevue, WA +3 89 days ago $169,000–$232,100
Agentic Security MCP OAuth 2.0 OpenID Connect SSO MFA RBAC IAM CIAM OWASP Top 10 Agile Prompt Injection Claude Code GDPR CCPA SOC 2
5+ yrs exp Hybrid