Job Description

Technical Project Manager - Application Security (DC)

Join to apply for the Technical Project Manager - Application Security (DC) role at OnDefend .

Job Overview

We are seeking a Technical Project Manager (TPM) with a strong foundation in computer science-related roles and technical reporting to support cybersecurity project delivery across a pod-based consulting model. This position will focus on application security assessments. The TPM partners with one Lead Consultant and three Security Testers to execute and document application penetration tests, secure code reviews, and security tooling integrations. The TPM ensures projects are delivered on time, in scope, and with the highest standard of technical communication.

Core Responsibilities in Pod Structure

Project Planning & Coordination

• Define project scope, testing goals, and timelines in collaboration with the Lead Consultant.
• Schedule and facilitate kickoff calls, stakeholder alignment meetings, daily syncs, and any additional team meetings as needed to facilitate the assessment objectives.
• Coordinate tester onboarding: access credentials, environment readiness, tooling setup, etc.

Resource & Task Management

• Monitor tester workloads, update Smartsheet/Jira trackers, and manage risk escalations.
• Serve as the primary liaison between technical teams and external stakeholders.
• Ensure POD execution remains on schedule and aligned with scope.

Technical Reporting & Documentation

• Draft, edit, and QA client deliverables including executive summaries, risk overviews, CVSS scoring, and mitigation recommendations.
• Maintain reporting templates and SOPs to standardize POD deliverables.
• Assist in retesting coordination and remediation validation reporting.

Client & Stakeholder Communication

• Translate tester updates into executive-ready briefings.
• Lead weekly check-ins and final report walkthroughs with client stakeholders as requested.
• Coordinate client feedback and adjust timelines/deliverables as needed.

Program Improvement & Metrics

• Track vulnerability trends, project KPIs, and client satisfaction metrics.
• Propose and document improvements to POD operations and delivery quality.
• Own the creation and updating of process documentation, retrospectives, and playbooks.

Required Qualifications

• 3+ years of project management experience in cybersecurity, application security, or software development.
• Proven track record in managing computer science-related roles such as AppSec testing, security tool integrations, or vulnerability management programs.
• Ability to write and edit technical documentation for technical and executive audiences.
• Familiarity with OWASP Top 10, CVSS scoring, and secure SDLC principles.
• Strong command of project management tools (e.g., Jira, Confluence, Smartsheet).

Preferred Qualifications

• Experience supporting red team, penetration test, or AppSec consulting engagements.
• Certifications such as PMP, CISSP, OSCP, GWAPT, or similar.
• Familiarity with security tooling (Burp Suite, ZAP, Veracode, Checkmarx, etc.).
• Experience managing remote/hybrid teams in a client-facing role.

Note: OnDefend does not provide visa sponsorship for this position. Applicants must be authorized to work in the United States without sponsorship.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Project Management and Information Technology

Job Tags

Similar Jobs