Product Owner – Application Security (contract)

Title: Product Owner – Application Security

Location: 300 S Brevard St. Charlotte, NC

Alternate Location: Dallas, TX

Duration: 12 months

Work Engagement: W-2

Work Schedule: 3 days in office/2 days remote

Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits

Summary:

The Application Security (AppSec) organization is responsible for defining and executing the enterprise strategy, vision, and roadmap for application security. AppSec supports a broad portfolio of security products and delivery teams to ensure secure development practices and risk reduction across the enterprise.

This role sits within the centralized AppSec organization and supports execution across multiple delivery teams aligned to enterprise objectives.

We are seeking an experienced Product Owner to support one of three Application Security delivery groups, collectively spanning 21 delivery teams. This role is responsible for translating high‑level AppSec strategy into executable product features and driving delivery in alignment with the AppSec product operating model.

The Product Owner will work closely with engineering teams, security stakeholders, and leadership to ensure successful execution and measurable outcomes across the assigned delivery group.

Responsibilities:

Strategy Execution

• Translate enterprise AppSec vision, strategy, and roadmap into actionable deliverables
• Ensure delivery outcomes align with leadership‑defined goals, priorities, and risk reduction objectives

Product Ownership

• Own and manage product features within the assigned AppSec delivery group
• Ensure alignment with AppSec product model standards, security objectives, and enterprise priorities

Delivery Planning & Execution

• Define delivery timelines (“when”) and manage execution using Agile/Scrum methodologies
• Break down initiatives into epics, features, and user stories for quarterly and annual planning
• Drive initiatives from intake through execution, delivery, and completion

Backlog Management & Prioritization

• Maintain ownership of the product backlog
• Prioritize work based on business value, security risk, and strategic alignment

Stakeholder & Engineering Collaboration

• Partner closely with engineering teams to ensure successful feature delivery
• Serve as the bridge between strategic direction and day‑to‑day execution
• Communicate progress, risks, and dependencies to stakeholders and leadership

Domain Focus: Application Security

This role operates within the Application Security domain, with a primary focus on:

• Vulnerability management and code scanning
• Secure development practices across enterprise applications
• Identification and remediation of security risks within application code

Relevant Concepts & Tools

• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• Vulnerability scanning tools (e.g., Checkmarx, TruffleHog)
• General understanding of secure coding standards and DevSecOps practices

Qualifications:

• Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.
• Proven experience as a Product Owner within a product operating model
• Strong Application Security (AppSec) background (required)
• Experience working within Agile/Scrum frameworks
• Demonstrated ability to translate strategy into detailed product features and execution plans
• Experience managing product backlogs and driving prioritization decisions
• Strong communication and collaboration skills with technical and security teams
• Background in AppSec engineering with a transition into product ownership (preferred)
• Experience operating in large, complex enterprise environments
• Familiarity with enterprise security frameworks and standards