Application Security Program Manager

About GSPANN

Headquartered in California, U.S.A., GSPANN provides consulting and IT services to global clients. We help clients transform how they deliver business value by helping them optimize their IT capabilities, practices, and operations with our experience in retail, high-technology, and manufacturing. With five global delivery centers and 1900+ employees, we provide the intimacy of a boutique consultancy with the capabilities of a large IT services firm.

Role: Application Security Technical Program Manager (TPM).

Location: San Francisco, CA (Hybrid)

Type: 12-24 months

Client’s Cybersecurity Team is seeking a highly technical contractor to own and drive application security vulnerability remediation programs, with an initial focus on HackerOne bug bounty findings, API security vulnerabilities, GraphQL authorization issues, and cross-functional remediation tracking.

The role will serve as the operational owner of the vulnerability remediation lifecycle, coordinating across Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation, assignment, remediation, and closure of security findings.

Bug Bounty Program Management

• Own day-to-day management of the HackerOne program.
• Manage vulnerability intake, triage, validation, routing, tracking, and closure.
• Coordinate weekly operating reviews with HackerOne and internal stakeholders.
• Track remediation commitments and drive accountability.
• Manage disclosure and communication processes.

Required Qualifications

Must Have:

• 5+ years experience in: Software Engineering or Application Security
• Strong understanding of: REST APIs, GraphQL, Authentication & Authorization, OAuth, JWT, OWASP Top 10, API Security Top 10.
• Experience reproducing security findings.
• Experience using Postman.
• Experience with Jira and ServiceNow.
• Strong stakeholder management skills.

Preferred

• HackerOne or Bug Bounty experience.
• AppSec experience.
• Penetration testing experience.
• Full-stack software development background.
• Burp Suite experience.
• GenAI automation experience.

Working at GSPANN

GSPANN is a diverse, prosperous, and rewarding place to work. We provide competitive benefits, educational assistance, and career growth opportunities to our employees. Every employee is valued for their talent and contribution. Working with us will give you an opportunity to work globally with some of the best brands in the industry.

The company does and will take affirmative action to employ and advance in the employment of individuals with disabilities and protected veterans and to treat qualified individuals without discrimination based on their physical or mental disability status. GSPANN is an equal opportunity employer for minorities/females/veterans/disabled.