Senior Manager, Cyber Platforms & Engineering

This role is the operational owner of cybersecurity for The Coca-Cola Company's non-core but business-critical technology platforms, ensuring secure configuration, continuous monitoring, and hardening against evolving threats. The Senior Manager works at the intersection of platform technology and cybersecurity, embedding security into platforms such as Power Platform, SAP, Salesforce, and connected product/IoT-enabled consumer platforms.

About the role

Reporting to the Senior Director, Security Engineering & Identity, this is an individual-contributor role that will build and lead a growing team as the program matures. The Senior Manager is a peer to the team responsible for core security platforms (SIEM, SOAR, PKI, DLP engineering) and focuses on the expanding universe of business and product platforms requiring dedicated cybersecurity expertise. The role partners closely with platform owners, business technology teams, and the broader Security Engineering function to ensure consistent security standards across the Company's platform portfolio.

Responsibilities

• Own the cybersecurity engineering posture for assigned business and product platforms, including Power Platform, SAP (security configuration, hardening, and monitoring, distinct from GRC/role management), Salesforce, and connected product/IoT-enabled consumer platforms.
• Define, implement, and maintain security baseline configurations, hardening standards, and monitoring controls for each platform.
• Conduct security assessments of platform configurations, integrations, and custom development to identify and remediate vulnerabilities, misconfigurations, and excessive permissions.
• Ensure platform security controls align with the Company's cybersecurity policies, standards, and architectural direction.
• Provide cybersecurity engineering support for connected product platforms and IoT-enabled consumer technology, ensuring secure design, configuration, and operation.
• Assess and mitigate security risks across connected product architectures, including device communication, cloud backends, API integrations, and data handling.
• Partner with product engineering and manufacturing technology teams to embed security into product platform development and deployment lifecycles.
• Ensure security monitoring and alerting are in place for assigned platforms, with appropriate integration into the Company's SIEM and SOC workflows.
• Support incident response activities for security events involving assigned platforms, providing platform-specific expertise and remediation guidance.
• Track and report on platform security posture, vulnerability remediation, and configuration compliance.
• Partner with the broader Security Engineering & Identity team to ensure consistent security standards, tooling, and practices across core and non-core platforms.
• Contribute to the development of platform security standards, reference architectures, and assessment frameworks that can scale across the Company's growing platform portfolio.
• Evaluate new platform technologies and integrations for security implications, providing guidance to business and technology stakeholders.
• Build and lead a growing team of platform security engineers as the program expands.
• Engage with platform owners, business technology leaders, and product teams as a trusted cybersecurity partner, balancing security requirements with platform functionality and business needs.
• Manage vendor relationships and third-party support for platform security tools and assessments.

Requirements

• Minimum 6 years of progressive cybersecurity experience, with significant focus on security engineering for enterprise business platforms, cloud-based SaaS applications, or product/IoT technology.
• Demonstrated hands-on experience with the security architecture, configuration, and hardening of at least two of the following: Microsoft Power Platform, SAP (security engineering, not GRC), Salesforce, or connected product/IoT platforms.
• Strong understanding of platform security fundamentals, including identity and access management, API security, data protection, secure integration patterns, and configuration compliance.
• Experience with security assessment and monitoring of SaaS and PaaS platforms, including the ability to evaluate platform-specific risks beyond traditional infrastructure security.
• Working knowledge of IoT and connected device security principles, including device authentication, secure communication, and cloud backend security.
• Familiarity with cybersecurity frameworks and standards such as NIST CSF, ISO 27001/27002, and OWASP, applied in platform security contexts.
• Experience leading or building technical teams, with the ability to attract, develop, and retain platform security engineering talent.
• Strong communication skills, with the ability to engage platform owners, product teams, and business leaders on security requirements and risk trade-offs.
• Scripting and automation skills (PowerShell, Python, or equivalent) for security assessment, monitoring, and configuration management.
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related technical field required. Master's degree or relevant professional certification (CISSP, CCSP, or platform-specific certification) highly desirable.

Benefits

A full range of medical, financial, and/or other benefits, dependent on the position, is offered.

Pay

Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. Pay range: 152,000 USD - 178,300 USD.

Annual Incentive reference value is a market-based competitive value for your role, set at 15% of the midpoint of the pay range, indicating performance at target.

Long-term Incentive reference value ranges from 0% to 20% of the pay range.

Schedule

• Location: Atlanta, GA (Global Headquarters)
• Travel: Estimated up to 10% travel, primarily domestic, with occasional travel for vendor engagements, platform assessments, and industry events.

This position does not offer sponsorship for employment status (e.g., H1-B visa status or other employment-based nonimmigrant visas). Applicants must be currently authorized to work in the United States on a full-time basis without requiring sponsorship.