Technical Program Manager, Security Vulnerability Management

United States·SeattleRemoteFull-Timemid

SecurityOtherTechnical Program ManagerProgram ManagerProject & Program Management

4 views0 saves0 applied

Apply Now

Quick Summary

Overview

About The Team This role is within our Security organization, which supports Cloud Security, Product Security, Enterprise Security, and Detection & Response.

Key Responsibilities

Are you passionate about contributing to the success of a cybersecurity program through program management? We are seeking an experienced Technical Program Manager to join our Security Team.

Technical Tools

awsazuregcpcybersecurityproject-managementsaassecurity-best-practices

About Outreach

Outreach, founded in 2014, is the only complete agentic AI platform for revenue teams. Outreach infuses agentic AI, conversation intelligence, and assistive AI to power hundreds of use cases across revenue motions. From new logo prospecting to expansions, deal acceleration, driving retention, and forecasting, Outreach AI automates workflows and frees sellers to focus on more strategic conversations and actions. Revenue leaders benefit from connected account visibility, performance insights, and higher forecasting accuracy across every GTM team. World leading enterprise organizations use Outreach to power their revenue teams, including Databricks, SAP, Siemens, and Verizon to name a few.

This role is within our Security organization, which supports Cloud Security, Product Security, Enterprise Security, and Detection & Response. This organization partners with Product, Engineering, Privacy, GRC, IT, and Legal teams to ensure security best practices are applied to protect the company and Outreach customers.

Are you passionate about contributing to the success of a cybersecurity program through program management? We are seeking an experienced Technical Program Manager to join our Security Team to focus on vulnerability management. In this role you will drive security programs and execute security projects that will assist executing a strategy to improve security posture. The ideal candidate combines strong technical security knowledge with exceptional program management skills. They are comfortable managing complex security projects, leading cross-functional initiatives, engaging directly with customers, and translating security findings into actionable engineering work. This role requires someone who can communicate effectively with engineers, security practitioners, executives, auditors, and customers alike. Location: We are open to remote.

Own the end-to-end Security Vulnerability Program across cloud infrastructure, applications, and runtime environments.

Coordinate identification, prioritization, tracking, remediation, validation, and reporting of vulnerabilities from multiple security sources, including Cloud Security Posture Management (CSPM), Operating System and Runtime vulnerabilities, Static Application Security Testing (SAST), and Software Composition Analysis (SCA).

Partner with Engineering and Security Engineering to establish vulnerability remediation priorities based on risk and business impact. Define and manage dependencies on external teams to improve security posture by getting alignment on commitments.

Track vulnerability remediation SLAs and provide executive-level reporting on vulnerability trends and program health.

Drive continuous improvements to vulnerability management processes and tooling.

Participate in discussions around vulnerability severity, remediation approaches, and security architecture.

Manage the Bug Bounty Program from intake through remediation and disclosure. Manage the bug bounty tool and vendor relationship.

Measure and improve upon the Bug Bounty Program effectiveness through metrics and process changes.

Manage third-party penetration testing engagements from planning through remediation. Manage vendor relationships, scheduling, deliverables, and quality expectations. Review and translate penetration test findings into actionable engineering work items.

Represent the Security organization on customer calls and talk about the Outreach platform and security procedures.

Lead cross-functional security programs and initiatives across Product, Engineering, Privacy, Legal, and Security.

Partner with Governance, Risk, and Compliance (GRC) team to provide evidence to auditors that demonstrate efficacy of security controls.

5+ years of cybersecurity experience in a Technical Program Manager in a fast-paced, SaaS software company.

Basic understanding of cybersecurity principles, including Network Security, Cloud Security (AWS, Azure, or GCP), and Application Security.

Possess vulnerability expertise and the drive to learn the Outreach platform to be able to have technical conversations with engineering

Experience managing technical security programs, such as Security Vulnerability Program, Bug Bounty Program, and Security Exceptions Program

Familiar with security vulnerability tooling and system integrations.

Can successfully prioritize work resulting from security findings, stakeholder requests, and strategic vision.

Proactively identify, assess, and manage security risks across projects and systems.

Experience managing external security vendors and third-party engagements.

An interest in emerging AI technologies and AI security is highly desirable as we continue to evolve our platform and security capabilities.

Familiarity with security frameworks (e.g., NIST, ISO 27001, SOC 2)

Excellent communication, organizational, and leadership skills

Why You’ll Love It Here

• Flexible time off

• 401k to help you save for the future

• Generous medical, dental, and vision coverage for full-time employees and their dependents

• A parental leave program that includes options for a paid night nurse, and a gradual return to work

• Infertility/ assisted reproductive services benefit

• Employee referral bonuses to encourage the addition of great new people to the team

• Snacks and beverages in the Office, along with fun events to celebrate

• Diversity and inclusion programs that promote employee resource groups like Outreach Women's Network, Latinx community, Outreach Black Connection, AAPI community, Pride/LGBTQIA+, Gender+, Disability Community, and Veterans/Military

Outreach is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Our success is reliant on building teams that include people from different backgrounds and experiences who can elevate assumptions and ideas with fresh perspectives. We're dedicated to hiring the whole human, not just a resume. To that end, we look for a diverse pool of applicants-including those from historically marginalized groups. We would like to invite you to apply even if you don't think you meet all of the requirements listed below. We don't want a few lines in a job description to get between us and the opportunity to meet you.