Security Engineering Manager

As the Security Engineering Manager, you will lead our Security Engineering team in a hands-on technical leadership role focused on securing the company’s cloud-native environment and development pipeline. You will manage a team of security engineers responsible for cloud infrastructure security, application security, CI/CD pipeline hardening, DSPM, and SaaS security posture management. Your primary objective is to harden our security posture, build and maintain preventative controls, and translate security strategy into a technically sound engineering roadmap.

• →Technical Execution & Architecture: Remain hands-on in configuring cloud security tooling, reviewing architecture, and validating engineering decisions. Serve as the technical escalation point for complex challenges across the team’s domain.
• →Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company’s development lifecycle and cloud environment.
• →Team Leadership: Lead and develop a team of security engineers, managing their performance and growth while fostering a culture of technical excellence and ownership.
• →Project Management & Execution: Define, manage, and execute security engineering projects from conception to completion, ensuring alignment with strategic goals and on-time delivery.
• →Cross-Functional Partnership & Security Standards: Partner with DevOps, Engineering, and Product leadership to ensure security requirements are integrated into engineering roadmaps. Define the target security state for engineering teams and validate effective implementation.
• →Driving Results: Proactively drive security initiatives and remediation to completion by removing roadblocks and instilling a sense of urgency.

• 7+ years of hands-on InfoSec experience in Cloud Security, Application Security, or DevSecOps.
• Direct people management experience in a security or engineering context, with a proven ability to drive technical projects to completion through a team.
• Strong understanding of application security, CI/CD pipeline security, secrets management, and secure development practices.
• Proven ability to translate security strategy into actionable engineering requirements — both for a dedicated security team and in partnership with development organizations.

• Hands-on experience with AWS security services and cloud-native security tooling (CSPM, CWPP, DSPM).
• Experience with application security testing (SAST, DAST, SCA) and securing CI/CD pipelines and Infrastructure as Code (Terraform, Spacelift).
• Familiarity with securing custom CRM or business-critical application environments.
• Knowledge of identity security across both human and non-human identities, including service accounts and API keys.

#LI-LB2