Manager of Security Engineering (Austin & San Antonio, TX)

Responsibilities

Directs and controls the activities of a broad functional area through several departments within the function. Has control of planning, staffing, budget attainment, and recommending / implementing changes to methods.

A portion of time may be spent performing individual tasks related to the function. Impact: Decisions have serious impact on overall success or failure on function (Digital).

Looks beyond existing methodologies to resolve complex issues often cross-functional in nature or with significant impact to the business.

Influences and implements the vision and strategic plans within a department.

Works on complex issues where analysis of situations or data requires an in-depth knowledge of the department.

Ensures budgets and schedules meet requirements.

Extensive business knowledge with comprehensive understanding of the organization and functional area.

Interacts daily with direct reports, peer leaders, and senior leaders effectively communicating and presenting results and recommendations within their department.

Manages one or multiple work groups or units in several different areas or a large functional unit; leads / manages daily coordination of technical staff and vendors.

Manages production or services of one or more departments or areas, with a high level of complexity and business impact.

Hires / maintains staffing / fires/ promotes / demotes / transfers / disciplines approves raises; manages / develops / trains teams to achieve department goals; develops / delegates tasks to complete projects; manages communications with stakeholders.

Leads / coaches / provides effective feedback; provides day-to-day technical leadership; communicates connection between Partners and impact to operational objectives.

Recommends changes in alignment with business strategy.

Provides leadership and expertise; participates in cross-functional initiatives; ensures Partners maintain sufficient technical knowledge; identifies training requirements.

Assists in developing budgets and goals.

Ensures goal setting and accomplishments align with H-E-B / Digital objectives, and technology decisions align with H-E-B direction and focus on total cost of ownership, maximization of third-party model, promoting cross-functional skill development of Partners, and customer relationships.

Identifies opportunities to improve team's leadership and technical skills.

Safeguards automation, infrastructure deployment, maintenance, monitoring, security, and compliance using industry and enterprise best practices.

Qualifications & Key Requirements

• You have 7+ years of experience working in Security roles
• You have 5+ years of experience leading Application Security teams
• You have experience with Architecture design decisions
• You have an expert understanding of application security principles and best practices
• You are highly proficient with security assessment tools and techniques
• You have an in-depth knowledge of common web application vulnerabilities such as OWASP Top 10
• Nice to have experience with NIST, PCI, or HIPAA

Nice to have experience

• Constantly staying abreast of latest security threats, tools and innovations on the field
• Knowledge/Skills/Abilities: Assists senior management in defining organizational goals and strategic plans.
• Working understanding of log analysis, application performance monitoring, API security, container security, AWS cloud security, Agile and other project management methodologies, PCI DSS, HIPAA, and other industry regulations

Advanced skills

• Advanced skills in AWS, Azure, or Google Cloud Platform; Terraform, CloudFormation, Pulumi, or Ansible; Python, Golang, PowerShell, Perl, or Shell script
• Advanced skills in Linux-based and Windows Server operating systems management, secrets management, and vaulting technologies
• Advanced skills using APIs to optimize tasks / achieve automation
• Advanced skills in cloud resources: virtual networking, access controls (security groups, ACLs), service endpoints, application / network load balancing, API gateways, service principals, functions / serverless, storage buckets, containers, block storage, file shares

Leadership / Management Skills

• Advanced leadership / management skills

Education

• Bachelor in a relevant field of education or work experience leading successful projects and coaching/mentoring others in functional area.

Licenses/Certifications

• One more professional security certifications e.g -CISSP, CISA, CEH, GIAC, cloud certifications from AWS, Azure, or GCP

Physical Demands & Working Conditions

• Function in a fast-paced environment
• Work extended hours; sit for extended periods