Senior Manager, Application Security
ABOUT LVT
LVT is redefining how businesses operate in the physical world, moving beyond traditional security solutions to deliver AI-driven, actionable intelligence that makes sites smarter, safer, and more secure. Since pioneering our first mobile, solar-powered units, our commitment to scrappy, hands-on innovation has made us an established leader and one of the fastest-growing companies in intelligent site technology. We are building the next generation of solutions—from our physical units in the field to a powerful Agentic AI platform—that allows our customers to gain unprecedented visibility and control over safety, compliance, and operations. This is your chance to join a cutting-edge team that isn't just watching the world change, but actively building the technology that is changing it.
We’re a team that’s focused on growth and innovation, and we’re proud that our crew, products, and leadership are being recognized for it.
A Top-Tier Growth Company: Named one of the Financial Times’ Fastest Growing Companies 2025 and #10 on the Inc. 5000 Rocky Mountain Regional list for 2025.
Innovative Leadership: Our CEO, Ryan Porter, was named an EY Entrepreneur of the Year 2025, and our CTO, Steve Lindsey, was inducted into the Silicon Slopes CTO Hall of Fame in 2024.
Product & Software Excellence: We were named one of The Software Report’s Top 100 Software Companies of 2023 and are a winner of the Security Today Govies Award for 2025.
ABOUT THIS ROLE
At LVT, application security isn't an internal formality or a late-stage gate. We run a multi-tenant cloud platform, AI-driven video analytics, and license plate recognition pipelines, and we deploy thousands of solar-powered units everywhere from remote utility sites to busy retail parking lots, where anyone can walk up and touch the hardware. A tenant isolation bug, an unsigned firmware update, or a flaw in our analytics isn't just a ticket. It's a customer incident, a potential public headline, and a threat to public trust. We don't block innovation; we make high-speed execution safe.
We are seeking a Senior Manager, Application Security to own product security end-to-end across LVT's physical and digital architecture. This is a player-coach role: you will manage and mentor our existing application security engineers, hire 1–2 additional security engineers, and launch a Security Champions program across product teams. Reporting to our Director, Security Engineering, you will earn a standing seat in product and engineering planning, frame risk so clearly that engineering leaders take ownership of it, and design guardrails that make the secure path the easiest path. If you'd rather build the program than police it, this role offers direct organizational impact.
This role is based full-time in-office out of our Headquarters in American Fork, Utah.
ROLE RESPONSIBILITIES
Team Leadership: Directly manage and mentor current AppSec engineers, hire and onboard 1–2 security engineers, and launch a cross-functional Security Champions program that scales your impact across every engineering squad.
Product Security Ownership: Set the architecture and standards for LVT's full attack surface, from our multi-tenant cloud platform and partner APIs to mobile clients, computer vision pipelines, and solar-powered edge firmware.
Engineering Partnership: Hold a standing seat in product design and planning, turning security risks into prioritized backlog items that engineering teams own and ship.
Threat Modeling at Scale: Make threat modeling a core muscle that engineering squads run independently. Train teams on the fundamentals while staying hands-on for high-stakes system designs and edge/hardware boundaries.
Tenant Isolation: Define, enforce, and test tenant boundaries across all platform services, deploying automated checks so cross-tenant data leaks never reach production.
Secure SDLC Automation: Build security into CI/CD pipelines as code (SAST, SCA, secrets detection, IaC policy), delivering developer feedback in minutes, not sprints, with low noise and clear build-break rules.