TC - CS - CTM - AppSec - Senior Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

CTM Senior Manager – Application Security

Overview

As part of our Cyber Security team, you will help secure applications and platforms while ensuring seamless development, build, and deployment capabilities. You will be responsible for designing secure software by identifying security use cases during the design and development stages, including emerging risks from AI/ML-enabled applications. You will work closely with DevOps, architects, developers, and QA teams to build highly reliable and secure products. You will also coach development teams on building a strong security culture and provide recommendations on vulnerabilities, secure development practices, and the responsible adoption of AI-driven technologies.

The Opportunity

We’re looking for a Senior Manager – Application Security & DevSecOps to lead high-impact application security engagements for enterprise clients. You will drive delivery, mentor teams, expand client relationships, and shape practice offerings across Secure SDLC, DevSecOps, Cloud Security, Threat Modeling, and AI/ML security.

This role involves enabling organizations to securely adopt GenAI and AI-driven solutions, ensuring risks are effectively managed while supporting innovation. This is a client-facing leadership role requiring both strong technical depth and executive-level communication.

Your Key Responsibilities

Client Delivery & Leadership

• Lead end-to-end application security assessments (SAST/DAST/SCA, penetration testing, secure code review, threat modeling).
• Design and implement Secure SDLC frameworks for Agile/DevOps environments.
• Advise CISOs and CTOs on application security strategy, roadmaps, and ROI.
• Manage large multi-workstream engagements.
• Advise clients on secure adoption of AI/ML and GenAI solutions, including risk assessments, governance, and secure enterprise integration.
• Lead client-facing engagements to assess and secure AI/ML applications, providing strategic direction on risk management, governance, and mitigation of vulnerabilities such as prompt injection and data exposure.

Practice Development

• Develop proprietary methodologies, accelerators, and IP in AppSec (, AI-driven secure coding, intelligent vulnerability prioritization, zero-trust application architecture).
• Contribute to thought leadership — whitepapers, webinars, conference talks (Black Hat, RSA, OWASP).
• Support proposal development and deal closure for strategic pursuits.
• Build and enhance AI security offerings, including GenAI security frameworks and AI risk governance models.

People & Team Leadership

• Mentor and performance-manage a team of 20–25 consultants (Managers, Seniors, Analysts).
• Build high-performing, diverse teams with a focus on technical excellence and client empathy.
• Drive utilization, training, and career development.

Skills and Attributes for Success

• Experience building enterprise-scale AppSec and DevSecOps programs from the ground up.
• Strong understanding of AI/ML and GenAI technologies and their application in enterprise environments.
• Knowledge of AI/ML security risks (model poisoning, prompt injection, data leakage, adversarial attacks) and mitigation techniques.
• Familiarity with secure AI adoption practices, including governance, model lifecycle security, and responsible AI principles.
• Experience contributing to thought leadership, research, or open-source initiatives in application security.
• Familiarity with regulatory frameworks (PCI DSS, HIPAA, GDPR, NIST SSDF).
• Executive presence — ability to influence CxOs and translate complex technical risks into business outcomes.

To qualify for the role, you must have

• BE / / MCA.
• Minimum of 12+ years of experience in application security, secure SDLC, DevSecOps, or security architecture.
• Strong communication and stakeholder management skills.
• Prior experience in a Big 4 or similar consulting environment as a Manager / Senior Manager.

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY | Building a better working world