Manager, Cybersecurity - Application Security

In this onsite leadership role, you will manage planning, coordination, and continual improvement of application security practices and technology platforms at Starbucks. You will work closely with application development teams to promote application security fundamentals, tools, and processes throughout the SDLC.

Key Responsibilities

• Introduce technical topics, sponsor opportunities for innovation, and recognize technical excellence.
• Drive the vision of operational excellence across the team.
• Model leadership behaviors grounded in Starbucks Mission and Values.
• Lead the team’s engagement, development, and performance.
• Collaborate with cross-functional teams to deliver projects and enhancements.
• Evangelize application security program fundamentals, tools, and processes, acting as a consultative partner.
• Develop requirements and plan and manage process and practices to ensure delivery of a world class application security program.
• Partner with other teams to continuously improve and advance the organization’s operational security capabilities.
• Lead the team with a vision that combines software development and systems engineering expertise to deliver self-service capabilities for application security platforms.
• Build and lead a supportive team culture where team members succeed together.
• Challenge and inspire the team to achieve world class results.
• Support partners in career growth.
• Define and maintain processes, procedures, and expectations for the team’s support responsibilities.
• Ensure appropriate support documentation exists.
• Lead the team through high severity operational incidents.

Requirements

• 7+ years of experience working in an information technology discipline.
• 5+ years of experience in application development or application security.
• Knowledge in application development and supporting a development environment.
• Experience with OAuth or other application authentication methods.
• In-depth knowledge and experience of CI/CD best practices.
• Development experience with at least one modern language such as Java, Python, Ruby, C++, or C#.
• Excellent problem-solving abilities.
• Certifications such as CISSP, CISM, CIPM, CEH, or others focused on cybersecurity, data privacy, or information risk management.
• Experience working with Bug Bounty or Vulnerability Disclosure programs.

Technologies

• OAuth
• Java
• Python
• Ruby
• C++
• C#

Role Details

• Location: Nashville, TN (onsite)
• Compensation: USD 137,300 - 228,900 per year
• Minimum Experience: 7 years

Benefits

• Medical, dental, and vision coverage
• Basic and supplemental life insurance
• Other voluntary insurance benefits
• Short-term and long-term disability
• Paid parental leave
• Family expansion reimbursement
• Paid vacation from date of hire
• Sick time accrued at 1 hour for every 25 hours worked
• Eight paid holidays
• Two personal days per year
• 401(k) retirement plan with employer match
• Discounted company stock program (S.I.P.)
• Starbucks equity program (Bean Stock)
• Incentivized emergency savings
• Financial well-being tools
• 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan
• Student loan management resources
• Access to other educational opportunities
• Backup care
• DACA reimbursement
• Reasonable accommodations for job applicants with disabilities