Senior Manager, Product and Application Security

Reports To

Senior Staff Embedded Security Architect

What You Will Be Doing

ChargePoint is looking for a Senior Manager who will help develop our product security strategy, implement tools, architect our product security roadmap, develop process, perform threat assessment and security reviews, and work with different team leaders to implement a security by design culture as part of our product lifecycle. This role will be responsible for providing guidance, advice, oversight, and implementation of controls on product security matters.

As a Senior Manager, Product Security, you will design security controls and help validate that our services, applications, stations, and emerging technologies are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering, and addressing security issues, designing security automation, and decisively taking action to mitigate emerging threats throughout a full secure development life cycle (SDLC). This role will provide career growth opportunities as you gain new security skills in the course of your work. You have an opportunity to experiment, learn, build tools, and work with teams building new technology and services at massive scale in the EV charging space.

What You Will Bring to ChargePoint

• Application security strategy development: Experience drafting and executing long-term product security roadmaps aligned with business goals.
• Cross-functional Leadership: Collaborate with engineering, product, legal, and compliance teams to embed security into every phase of development.
• Risk Management: Identify, assess, and prioritize risks across product lines and drive mitigation strategies.
• Executive Communication: Present security posture, incidents, and metrics to CISO and other C-level executives
• Secure SDLC (Software Development Lifecycle): Deep understanding of integrating security into design, development, testing, and deployment.
• Threat Modeling & Architecture Review: Ability to guide teams through threat modeling exercises and review system designs for vulnerabilities.
• Application Security: Expertise in OWASP Top 10, SAST/DAST tools, code reviews, and secure coding practices.
• Cloud & Infrastructure Security: Familiarity with securing cloud-native apps (AWS, Azure, GCP), containers, and microservices.
• DevSecOps: Experience embedding security into CI/CD pipelines and automation workflows.
• Security Training & Awareness: Build and deliver training programs for engineers and product managers.
• Incident Response & Forensics: Lead product-related security incidents, coordinate investigations, and drive postmortems.
• Metrics & KPIs: Define and track key performance indicators for product security maturity.
• Drive security adoption across teams without direct reporting lines.
• Grow and lead high-performing product security teams.
• Navigate ambiguity and evolving threat landscapes with resilience.
• Understand engineering constraints and advocate for practical, scalable security solutions.

Requirements

• 10+ years of progressive experience in product and application security across diverse industries and global teams, with a strong focus on secure product development and lifecycle management.
• Expertise in security architecture & threat Modeling and advanced application security testing
• Experience building and running a security champion program
• Experience with product security tooling and automation, programming & code review, strong networking and protocol
• Demonstrate ability to clearly identify business and regulatory implications of analysis and findings and propose strategic solutions
• Strong relationship’s skills / ability to communicate effectively both in writing and verbally
• Ability to identify and mitigate product security risks with the ability to understand materiality of risks and prioritize / differentiate response accordingly

Location

Gurgaon or Bangalore