Sr. Manager, Security Engineering

Role Description

As a Security Engineering Manager for Product & Production Infrastructure, you will lead and grow a team of talented Security Engineers responsible for protecting cloud-native environments, CI/CD pipelines, and core production infrastructure. In this role, you will act as a technical leader and people manager—providing strategic direction, mentorship, and operational excellence while staying close to modern cloud and container technologies across AWS, Azure, and GCP. You will build deep partnerships with Software Development, DevOps, and Product Management teams to embed secure-by-design principles into developer workflows, drive proactive vulnerability management, and champion our internal dogfooding program to assess, monitor, and influence product roadmaps.

Responsibilities

• Team Leadership & Talent Development: Recruit, retain, develop, and coach a high-performing, globally distributed team of Security Engineers; establish performance goals, conduct 1:1s, and support career progression.
• Technical Strategy & Architecture: Lead threat modeling and technical security reviews across product architectures and multi-cloud infrastructure to identify attack surfaces and design scalable mitigation strategies.
• Security Automation & "Shift-Left": Drive the creation of automation, policy-as-code, and developer-friendly security tooling to integrate continuous, end-to-end security checks into CI/CD workflows.
• Infrastructure & Container Hardening: Define, implement, and govern secure baselines for multi-cloud resources and managed Kubernetes infrastructure (EKS, GKE, AKS).
• Vulnerability & Supply Chain Management: Oversee end-to-end vulnerability management and remediation programs, establishing preventative controls across software supply chains from development to production.
• Detection & Incident Response: Partner with detection and response functions to scale alert triage, investigation capabilities, and automated incident remediation.
• Cross-Functional Partnership: Build deep functional relationships with Engineering and DevOps leadership to balance security requirements with product delivery velocity.

Minimum qualifications

• Leadership Experience: 2+ years of experience leading, managing, or mentoring security engineering, DevOps, or technical cloud infrastructure teams.
• Technical Experience: 7+ years of experience in security engineering or security operations within cloud-native environments.
• Cloud & Container Security: Strong hands-on cloud security experience in AWS (with working knowledge of Azure or GCP), along with deep knowledge of Kubernetes (EKS/GKE/AKS) and container security principles.
• Identity & Access Management: In-depth understanding of cloud IAM architecture and identity security at enterprise scale.
• Infrastructure as Code & Automation: Hands-on experience with IaC frameworks (Terraform, CloudFormation, Helm, or Pulumi) and automation scripting/tooling in Python, Go, Shell, HCL, or Rego.
• Application Security: Practical knowledge of web application security fundamentals and threat modeling (e.g., OWASP Top 10, software supply chain security).

Preferred qualifications

• Bachelor's degree in Computer Science, Cybersecurity, a related technical field, or equivalent practical experience.
• Experience managing and scaling remote, globally distributed engineering teams.
• Prior experience in organizations that develop and operate large-scale SaaS or managed cloud services.
• Experience with CNAPP, CSPM, CIEM, or CDR platforms and methodologies.