Steven Johnson

About Steven Johnson

Security Program Leader | Vulnerability Management | Application Security | Product StrategyI’m a seasoned security program manager with deep experience driving enterprise-scale vulnerability management and application security initiatives across financial services, global data firms, and telecommunications. I specialize in aligning security strategy with engineering goals—building trust across technical and executive teams to embed security into the DNA of software development lifecycles.Over the past decade, I’ve led programs that have- Achieved 90%+ adoption of application security tooling across dev teams- Reduced penetration testing vulnerabilities by over 60% in under a year- Scaled Security Champions programs and developer education to engineers- Designed and delivered analytical engines for global vendor risk platforms- Unified tooling, policy, and process across complex tech ecosystemsMy approach blends technical depth, agile leadership, and a human-centered mindset. I thrive in environments where influence matters more than authority, and where security is seen as an enabler of innovation—not a blocker.Let’s connect if you’re passionate about building secure systems at scale, solving hard problems across functions, or pushing the boundaries of what security can look like in modern development.

Experience

1. Vice President

   Bank of America

   Apr 2022 — Present · Addison, TX, US

Education

• The University of Texas at Dallas

  Master of Business Administration (MBA)

  2011 — 2014

• The University of Texas at Dallas

  Master

  2009 — 2011

• Southern Methodist University

  M.S. in Securtiy Engineering

  2015 — 2020

• The University of Texas at Dallas

  Bachelor

  2005 — 2008