Application Security Manager

Application Security Manager This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office. Who We Are: Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE. Job Description: About Our Cybersecurity Team Are you ready to make an impact at one of the world's leading technology companies? HPE's Cybersecurity team is where you can do just that. We're looking for a dynamic and experienced Application Security Manager to join our team. If you're passionate about shaping the future of cybersecurity and ready for your next challenge, we'd love to hear from you. About the Role We're building a modern, enterprise Application Security program, and we're looking for a Manager to lead the engineers who run it day to day. This is a build-and-scale leadership role: the team is new, the strategy is set, and the toolchain is in place or rolling out. You'll turn that foundation into a high-performing team and a repeatable operating rhythm across Secure SDLC, web application and API protection, CI/CD pipeline security, SaaS security, and the emerging discipline of AI/LLM security. Application security engineers will run the tools and do the technical work; you'll bring the technical depth to guide their decisions, review their approach, unblock them, and hold a high-quality bar. You'll work as one team with the US-based Application Security team, and partner closely with application owners, IT, and engineering teams to translate risk into outcomes developers adopt, so applications are secure by default. What you’ll do: • Lead and develop a growing team of 5–7 senior application security engineers based in Bangalore, India • Hire, onboard, and develop a team of application security engineers; set clear goals, career paths, and a culture of ownership and technical excellence. • Run day-to-day team operations: sprint planning, workload prioritization, on-call/escalation coverage, and vendor coordination. • Provide technical direction and guidance to engineers: review triage decisions, tuning approaches, and remediation guidance, and step in on complex or escalated issues. • Define team processes, runbooks, and RACI so work scales beyond individuals. • Build and mature a scalable Application Security operating model with clear ownership, repeatable processes, measurable outcomes, and effective handoffs across Application Security, application owners, IT, and engineering teams. • Work as an extension of the Application Security team, on aligning priorities, roadmap execution, standards, and shared operating processes across time zones. • Establish strong working relationships with application owners and engineering leads • Drive adoption of security controls by understanding application owners' delivery constraints and negotiating practical, risk-based remediation timelines. • Manage the risk exception process with application owners, ensuring exceptions are documented, time-bound, and tracked. • Oversee the team's operation of static application security testing (SAST), software composition analysis (SCA), secret scanning, and dynamic application sec