Security Engineering Manager

Key Responsibilities

• Technical Execution & Architecture: Remain hands-on in configuring cloud security tooling, reviewing architecture, and validating engineering decisions.
• Serve as the technical escalation point for complex challenges across the team’s domain.
• Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company’s development lifecycle and cloud environment.
• Team Leadership: Lead and develop a team of security engineers, managing their performance and growth while fostering a culture of technical excellence and ownership.
• Project Management & Execution: Define, manage, and execute security engineering projects from conception to completion, ensuring alignment with strategic goals and on-time delivery.
• Cross-Functional Partnership & Security Standards: Partner with DevOps, Engineering, and Product leadership to ensure security requirements are integrated into engineering roadmaps. Define the target security state for engineering teams and validate effective implementation.
• Driving Results: Proactively drive security initiatives and remediation to completion by removing roadblocks and instilling a sense of urgency.

Skill Requirements

• 7+ years of hands-on InfoSec experience in Cloud Security, Application Security, or DevSecOps.
• Direct people management experience in a security or engineering context, with a proven ability to drive technical projects to completion through a team.
• Strong understanding of application security, CI/CD pipeline security, secrets management, and secure development practices.
• Proven ability to translate security strategy into actionable engineering requirements — both for a dedicated security team and in partnership with development organizations.

Desirable Skills

• Hands-on experience with AWS security services and cloud-native security tooling (CSPM, CWPP, DSPM).
• Experience with application security testing (SAST, DAST, SCA) and securing CI/CD pipelines and Infrastructure as Code (Terraform, Spacelift).
• Familiarity with securing custom CRM or business-critical application environments.
• Knowledge of identity security across both human and non-human identities, including service accounts and API keys.