The Role
Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.
Summary Generated by Built In
Your role in our mission
Prosper is seeking an experienced Application Security Senior Manager to lead our Application Security program. Reporting to the Head of Information Security, this role drives the strategy, implementation, and optimization of application security controls across the organization. This position requires deep technical proficiency and the leadership skills to influence technology and product teams across the organization. We are looking for smart, self-driven candidates who want to be part of an innovative FinTech company with a mission to improve the financial well-being of its customers.
How you’ll make an impact
- Program Leadership: Define and execute a multi-year Application Security roadmap aligned with business goals and industry best practices
- AI Security Leadership: Help define the secure architecture and guardrail framework for AI adoption across the company
- Security Engineering & Automation: Integrate threat modeling, security tools & testing (SAST, SCA, DAST, IAST, RASP, etc.), and secure by design processes into the SDLC (CI/CD pipeline)
- Architecture Reviews & Technical Execution: Perform security architecture reviews for major product changes; conduct in-house secure code reviews and threat modeling for high-impact features and critical products.
- Vulnerability Management: Oversee the end-to-end AppSec vulnerability lifecycle (identification, prioritization, and remediation based on business risk, exploitability, and threat intelligence)
- Incident Response: Direct and manage incident response for application security alerts/incidents
- Offensive Security & Testing: Lead the strategy for third party penetration tests
- Reporting & Metrics: Deliver executive-level dashboards and reports on application security posture and risk trends
- Continuous Improvement: Drive continuous improvement activities, and deepen leadership awareness of product and application security risks
- Strategic Partnership & Collaboration: Collaborate with Engineering and Product leads to embed security into the SDLC and scale the Security Champions program
- Team Leadership: Direct a small team of AppSec engineers while remaining deeply hands-on in technical execution
Skills that will help you thrive
- 10+ years of progressive application security experience (prior software development experience preferred)
- Ability to lead, manage, and develop a technical Application Security Engineering team
- Great interpersonal skills, ability to foster constructive dialogue
- Deep technical knowledge with a track record of successful execution in application security (secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
- Strong knowledge of CI/CD pipelines, cloud-native security (GCP), and container security
- Bachelor's degree in Computer Science or a related field, or its equivalent in work experience
- Strong working knowledge of at least two programming or scripting languages
Resources to help you prosper
- A connected experience: We prioritize high-touch collaboration and flexibility. Whether you are working from our San Francisco or Phoenix offices or joining us as a fully remote team member, we provide the digital-first tools and intentional culture to keep you synced and supported
- Invested in your future: A competitive salary and a 401(k) with a 5% company match to help you build long-term financial security
- Holistic well-being: We provide the resources you need to thrive, from flexible time off and paid parental leave to an annual wellness allowance and comprehensive health coverage
- Professional & personal growth: Take advantage of a suite of premium perks, including Udemy access, childcare assistance, pet insurance, and a bevy of additional savings through Beneplace
Interview Process
- Recruiter Call: A brief screening to discuss your experience and initial questions
- Department Interview: Deeper dive into technical skills and project alignment with the Hiring Manager or team member
- Technical Interview: Deeper dive into coding skills
- Team Interview: Meet team members for collaborative discussions, problem-solving, or technical exercises
#LI-SK1
#LI-remote
About Our Technology Team
We are growing our Technology team to support our various financial products. The ideal candidate is passionate about learning the Fintech domain and delivering cutting-edge, high-quality solutions to solve business problems. We utilize a progressive, test-driven, Agile development methodology that places a high premium on communication, teamwork, sound design and clean implementation.
About Us
Prosper introduced U.S. consumers to an innovative approach to personal finance as the first peer-to-peer lending platform in the country. Since 2005, Prosper has helped over 2 million customers achieve financial well-being through a comprehensive suite of digital personal finance products.
Prosper’s flagship personal loan* marketplace continues to offer unique value for both borrowers and investors, while the Prosper® Card¹ provides essential access to credit and flexibility for those managing their financial journey. Guided by its mission to advance financial well-being, Prosper is dedicated to helping people thrive by meeting people where they are with simple, trusted, and affordable financial solutions. Learn more at www.prosper.com.
We’re on a mission to hire the very best, and we are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere. It is important to us that every hire connects with our vision, mission, and core values. Join a leading fintech company that’s democratizing finance for all!
Our Values
- Diversity expands opportunities
- Collaboration creates better solutions
- Curiosity fuels our innovation
- Integrity defines all our relationships
- Excellence leads to longevity
- Simplicity guides our user experience
- Accountability at all levels drives results
www.prosper.com
Our Story & Team // Our Blog
Applicants have rights under Federal Employment Laws.
Family & Medical Leave Act (FMLA)
Equal Employment Opportunity (EEO)
Employee Polygraph Protection Act (EPPA)
California applicants: please click here to view our California Consumer Privacy Act (“CCPA”) Notice for Applicants, which describes your rights under the CCPA.
Illinois applicants: please click here to view our Artificial Intelligence Notice for Applicants.
At Prosper, we're looking for people with passion, integrity, and a hunger to learn. We encourage you to apply even if your experience doesn't precisely match the job description. Your unique skill set and diverse perspective will stand out and set you apart from other candidates. Prosper thrives with people who think outside of the box and aren't afraid to challenge the status quo. We invite you to join us on our mission to advance financial well-being.
Prosper is committed to an inclusive and diverse workplace. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law, including the San Francisco Fair Chance Ordinance. Prosper will consider for employment qualified applicants who are non-US citizens and will provide green card sponsorship.
*All personal loans are made by WebBank.
¹The Prosper® Card is an unsecured credit card issued by Coastal Community Bank, Member FDIC, pursuant to license by Mastercard® International.
Skills Required
- 10+ years of progressive application security experience
- Prior software development experience
- Lead, manage, and develop a technical Application Security Engineering team
- Deep technical knowledge of secure SDLC, penetration testing, and security tooling (SAST, DAST, IAST, RASP, SCA)
- Experience integrating security into CI/CD pipelines
- Experience with cloud-native security on GCP
- Experience with container security
- Bachelor's degree in Computer Science or related field, or equivalent experience
- Strong working knowledge of at least two programming or scripting languages
- Experience with threat modeling and secure code reviews
- Experience overseeing vulnerability management lifecycle (identification, prioritization, remediation)
- Experience directing application security incident response
- Experience leading third-party penetration testing strategy
- Ability to define secure architecture and guardrails for AI adoption
- Strong interpersonal and collaboration skills to work with engineering and product teams
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Prosper’s mission is to advance financial well-being. The company’s online lending platform connects people who want to borrow money with individuals and institutions that want to invest in consumer credit. Borrowers get access to affordable fixed-rate, fixed-term personal loans. Investors have the opportunity to earn solid returns via a data-driven underwriting model. To date, over $17 billion in personal loans have been originated through the Prosper platform for debt consolidation and large purchases such as home improvement projects, medical expenses and special occasions.
