[Hiring] Senior Delivery Manager - Application Security @EPAM Systems

Role Description

A single missed vulnerability can undermine even the most advanced security program. The Senior Delivery Manager - Application Security role in Spain sits at the intersection of cybersecurity and AI-Native Cyber Resilience, where the stakes are measured in both technical depth and business impact. This is where established application security meets the speed and scale of agentic workflows and AI-driven optimization. You decide how security findings become actionable change, connecting technical execution with executive priorities. The person in this role shapes how organizations turn raw security data into real-world resilience.

• Steer the roadmap, milestones, governance model, risks and impediments, and financial performance of enterprise Application Security programs
• Lead the integration of agentic techniques and AI optimization into existing security processes to address high-risk findings at machine speed
• Establish and govern systems and processes that validate, deduplicate, and rank security findings based on practical exploitability, business context and actual impact, and drive the remediation of vulnerabilities at scale
• Establish clear evaluation criteria and actionable reporting, and build an integrated overview of the security posture across an application portfolio
• Translate Application Security metrics, AI KPIs and risk reduction milestones into clear, actionable reporting for C-level executives and portfolio leaders

Qualifications

• Proven track record in managing enterprise-scale delivery management or program leadership within cybersecurity, with a heavy emphasis on Application Security programs
• Industry-recognized security certification required, with a strong preference for CSSLP (Certified Secure Software Lifecycle Professional), CISM, CISSP or equivalent senior credentials
• Demonstrated experience or strong familiarity with AI optimization, agentic workflows, LLM integration or automated software/security pipelines
• Deep understanding of software development lifecycles, Application Security vulnerabilities, risk evaluation and quantification, and executive stakeholder management
• Exceptional capability in governing cross-functional engineering teams, managing program financials and defining robust operational governance models