New

Senior Application Security Manager

Imprivata
$200,000.00 to $210,000.00
United States, Massachusetts, Waltham
480 Totten Pond Road (Show on map)
Apr 07, 2026
Description Ready to join a team that's all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely. We believe work can be more than a job or task-it's a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what's possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results-for your career, your teammates, and our customers. When you join Imprivata, you embark on a shared journey of ambition and growth. We're committed to building an inclusive workplace where everyone feels valued and supported. If you're looking for a place to match your passion with purpose-and where every day you can make an impact-you'll find it here. We are seeking aSenior Application Security Manager to join our team. This is a hybrid opportunity based out of our Waltham, MA office. Job Summary The Senior Application Security Manager is a leader within Imprivata's Application Security and Privacy function. This role protects the Imprivata brand and customer trust by reducing product security risk, improving security maturity across the software development life cycle, and ensuring that Imprivata's products meet the expectations of customers, auditors, and security-conscious buyers. The Senior Application Security Manager will operate as a senior technical leader and coach, partnering closely with engineering, product management, DevOps, quality engineering, corporate security, and privacy stakeholders. Duties and Responsibilities Lead and scale the application security program across products, embedding secure-by-design and shift-left practices throughout the SDLC. Manage, mentor, and set direction for the AppSec team, including priorities, goals, and operating cadence. Act as a senior technical authority on secure architecture, coding, threat modeling, vulnerability management, and remediation. Define and drive the roadmap for AppSec tooling and automation, including implementation, adoption, and optimization. Integrate security controls into engineering workflows, CI/CD pipelines, code reviews, and release processes. Oversee penetration testing programs, validate findings, and ensure timely, accountable remediation. Develop and report on AppSec metrics, dashboards, and executive-level insights on risk and program maturity. Promote security awareness through training, guidance, and active engagement with engineering and product teams. Support incident response and investigations, providing leadership on containment, root cause, and corrective actions. Collaborate cross-functionally and act as a player-coach, influencing leaders while balancing strategic direction with hands-on execution and staying current on emerging threats. Other duties as assigned and required. Required Qualifications Proven ability to lead and scale application security programs with secure-by-design and shift-left principles. Experience managing and mentoring AppSec teams, setting priorities, goals, and operating rhythms. Deep technical expertise in secure architecture, secure coding, threat modeling, and vulnerability management. Dynamic background in AppSec tooling and automation, including implementation, tuning, and adoption. Experience embedding security into engineering workflows, including CI/CD, code reviews, and release processes. Hands-on experience with penetration testing, remediation management, incident response, and risk reduction. Ability to influence cross-functional stakeholders, communicate security insights, and balance strategic leadership with hands-on execution. Preferred Qualifications: Experience leading AppSec in multi-product SaaS or highly regulated environments, with strong exposure to customer and third-party security assessments. Hands-on expertise in cloud-native and API security, CI/CD tooling, and integrating security into developer workflows. Proven ability to build security metrics, governance, and executive reporting, supported by relevant industry certifications (e.g., CISSP, CSSLP, CISM, CCSP). This position offers a total compensation range of $200,000.00 to $210,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives). In addition, more information about Imprivata's benefit offerings can be found here. This range represents the high and low end of Imprivata's compensation range for this position. Actual compensation will vary and may be above or below the range based on various factors, such as a candidate's location, skills, experience, and qualifications. At Imprivata, we have a top-notch work environment, developmental opportunities, a competitive total rewards package, and the desire to have fun. If you have the skills and qualifications as we have described above, we want to hear from you! Imprivata provides equal employment opportunities, regardless of race, religion, age, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. #LI-Hybrid #LI-SF1