Security Engineering Manager

About the role

We’re looking for an experienced Engineering Manager within the Infrastructure Engineering group to lead our Security Engineering team. Security engineering at Reverb is responsible for leading, designing, and building secure systems and practices for our e-commerce platform. They are highly involved in planning technical systems, designing secure practices, governance, and proactive engagement with the engineering and product organizations.

Responsibilities

• Day-to-day management of security engineers and analysts at Reverb
• Security sprint planning and retrospectives
• Collaborate with other engineering managers to achieve roadmap goals
• Perform security reviews, audits, assessments, and remediation actions or reporting
• Engage in highly technical architecture feedback and design reviews
• Hands-on engagement with git, DevOps, and security tools to help bolster understanding with other technical teams
• Advise crucial GRC, technical, and policy to engineering leadership

Requirements

• 2+ years leading or supervising security teams
• 2+ years of hands-on experience with AWS, Terraform, Helm, Kubernetes, or other generalized DevOps tooling
• 4+ years of experience in the security domain with technical expertise or contributions
• Track record of crafting, developing, and handling security projects
• Ability to develop policy, process, and procedures to apply to engineering organizations
• Detection and Response concepts with SIEM, EDR, Incident Management, IDS, and WAF like Cloudflare, Datadog, incident.io, etc.
• Experience with Vuln Management, CICD Security, BugBounty
• Regulatory experience such as PCI, FEDRAMP, SOX, etc.
• Knowledge of Authentication, RBAC, and IAM systems like Okta, AWS SSO, etc.
• Experience with JIRA and Confluence
• Experience with Git
• Deep networking and threat modeling experience
• Experience with AST tools like GHAS, Snyk, or ArmorCode
• Experience with CrowdStrike platforms
• Deep experience with GitHub and GitHub security controls
• Hands-on experience with AWS EKS, Rancher, or other Kubernetes platforms