Manager, Security Engineering

About the role

The Manager of Security Engineering leads a team of security engineers focused on application security, cloud security, and AI system security across Acquia's product portfolio. This role operates on an evidence-based engineering model, proactively researching and identifying systemic security gaps to build automated controls and guardrails. The position acts as the critical nexus between Security Operations and Product Engineering, translating complex technical risks into actionable roadmaps that align with business objectives.

Key Responsibilities

• Team Leadership & People Management: Manage, mentor, and grow a dedicated team of security engineers; conduct continuous performance evaluations (quarterly and annually); and advocate for promotions.

• Technical Strategy & Roadmap Execution: Define and execute a forward-looking security engineering roadmap aligned with Product Engineering needs and broader business initiatives; translate high-level business direction into actionable quarterly deliverables; establish and measure team success against quarterly goals and continuous improvement of annual compliance audit results.

• Application Security & Secure SDLC: Champion shift-left security practices, including threat modeling, secure code review, and developer security training; own and scale application security tooling; shift the security paradigm from manual operational cleanup to automated solutions.

• Evidence-Based Engineering & Cloud Security Architecture: Lead research spikes to investigate cloud-native environments; define and enforce cloud security standards; evaluate and deploy AI-native security tooling.

• Agentic AI & LLM Security: Define and enforce security standards for internal enterprise AI systems; lead threat modeling for agentic AI systems; partner with AI/ML engineering teams; evaluate and deploy AI-native security tooling.

• Cross-Functional Collaboration & Influence: Act as an internal consultant and advisory body to Product Engineering teams; communicate complex security risks; influence and negotiate with software developers; serve as the primary technical bridge between Product Engineering and Security Operations.

Qualifications & Technical Requirements

• Application Security: Hands-on experience with SAST, DAST, and SCA tooling; guiding engineering teams on remediation.

• Cloud Security: Deep understanding of securing cloud-native applications and services on AWS; IAM, API Gateway, secrets management, and container workloads.

• AI Security: Working knowledge of OWASP LLM Top 10, agentic AI attack surfaces, and security considerations for AI systems with external integrations.

• AI Tooling: Experience with AI-assisted security tools; embedding security review into AI development lifecycles.

• Compliance Acumen: Strong working knowledge of compliance frameworks, including ISO/SOC, PCI, and FedRAMP.

• Communication Skills: Exceptional ability to translate technical concepts; interpersonal skills to influence engineering teams.

Pay

$150,000 - $169,750 USD