Sr. Manager, Security Engineering

Required

• Define quarterly objectives and key results, key performance indicators, and key risk indicators that show coverage, outcomes, trends, and remaining exposure.
• Communicate risk and tradeoffs clearly to technical leaders and executives. Escalate material risks with practical options, owners, and recommended decisions.
• Maintain policies, standards, control evidence, inventories, and operating procedures that support SOC 2, ISO 27001, privacy, customer assurance, and other applicable obligations.
• Evaluate and rationalize security tools and services based on measurable risk reduction, engineer experience, coverage, integration, and total cost.
• 8+ years in information security, including significant experience in product or application security, cloud security, vulnerability management, or security engineering.
• 3+ years leading security engineering teams, including experience managing distributed or cross-region teams. Experience leading managers is preferred.
• Demonstrated ability to build and mature security programs in a cloud-native SaaS environment, preferably on AWS.
• Practical experience securing modern software delivery, including secure development lifecycle practices, application security testing, cloud-native infrastructure, containers, infrastructure as code, software supply chain, and vulnerability operations.
• Working knowledge of AI and machine learning security risks and controls. Experience securing large language model, agentic, or retrieval-augmented generation features is strongly preferred.
• Ability to evaluate technical risk, make sound tradeoffs, and convert strategy into clear roadmaps, operating mechanisms, and measurable outcomes.
• Strong executive and technical communication skills, including the ability to explain complex risk in plain language and influence without relying on authority.
• Knowledge of relevant practices and frameworks such as NIST Secure Software Development Framework, OWASP, OWASP guidance for large language model applications, MITRE ATLAS, CIS Benchmarks, NIST 800-53, SOC 2, and ISO 27001.