Manager, Security

About This Role

This role involves managing the Product Security Program, which covers both product security and application security. You will lead a team, support secure software delivery, champion DevSecOps practices, and work closely with engineering and product teams to integrate security throughout the software development lifecycle (SDLC).

Responsibilities

• Support and execute the Product Security Program, helping to set strategy and execution plans
• Drive implementation of security-by-design principles into technology platforms and development workflows
• Manage and develop a high-performing security team focused on secure software development, threat modeling, and secure architecture
• Provide day-to-day people leadership, coaching team members to drive growth, accountability, and cross-functional collaboration
• Support the development, implementation, and continuous improvement of secure coding standards, threat modeling frameworks, and security architecture reviews
• Support the adoption of cloud-native security, software supply chain controls, and modern DevSecOps practices across all development environments
• Partner with leaders and cross-functional teams across engineering, DevOps, and product teams to influence product roadmaps and the integration of security into CI/CD pipelines
• Oversee vulnerability management, code scanning, and remediation processes for all software products and applications
• Manage the implementation and effective use of security tooling and automation, including SAST, DAST, container scanning, and secrets management
• Manage security training and awareness initiatives for developers and product managers
• Track and report on key metrics (KRIs/KPIs) to key stakeholders that inform executive decisions and demonstrate program effectiveness
• Monitor emerging threats and ensure proactive defenses are in place to protect our software assets
• Promote a culture of continuous improvement, learning, and inclusion within the security program
• Manage identified security issues and vulnerabilities, prioritizing remediation and driving timely response actions to strengthen defense posture and reduce exposure
• Coordinate penetration testing, security testing and validation
• Manage remediation of findings
• Perform other duties as assigned
• Comply with all policies and standards

Requirements

• Bachelor's Degree or equivalent experience preferred in Computer Science, Engineering, or Cybersecurity
• 10+ years of work experience in product security or related field; including 5+ years of experience leading or managing a team
• Proven track record building and scaling secure software programs for SaaS, microservices, APIs, and cloud-native architectures