Manager, Product Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and enhance Delinea's Product Security function while developing capabilities to safeguard its product offerings.

• Design and implement a Product Security target operating model that incorporates agile methodologies and DevSecOps best practices.

• Foster a high-performing culture within the Product Security team.

• Collaborate with Product Development to integrate security measures and empower developers.

• Direct the analysis, evaluation, and improvement of Product Security postures.

• Oversee the implementation of Product and Cloud Security solutions.

• Provide strategic and technical guidance for Application Security and Vulnerability Management services.

• Conduct security architecture reviews for applications at both design and production stages.

• Perform threat modeling and offer risk-based mitigation recommendations.

• Ensure compliance with vulnerability management processes and service level agreements (SLAs).

• Guide architects and engineers in comprehending current-state architecture and defining target-state architectures along with multi-year roadmaps.

• Anticipate potential threats, identify architectural vulnerabilities, and assist in breach investigations and root cause analyses.

• Collect and evaluate functional requirements while leading proof-of-concept initiatives.

• Develop security solutions in collaboration with partner organizations to support business strategies.

• Manage the planning, scheduling, resource allocation, scope, budget, and delivery of Product Security initiatives.

• Collaborate with Cybersecurity, IT, product, and operations teams to comply with regulatory, industry, and security standards.

• Act as the primary point of contact for Product Security inquiries and escalate issues as necessary.

• Promote continuous enhancements in cybersecurity processes.

• Prepare and present reports and presentations to executives, stakeholders, and auditors.

• Engage in customer-facing calls and review customer contracts regarding Product Security inquiries.

• Report directly to the Chief Information Security Officer (CISO).

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Security, Business Administration, or a related discipline.

• Over 8 years of pertinent experience in Product, Application, and Cloud Security.

• Current understanding of the Product Security threat landscape and industry best practices.

• Demonstrated success in addressing complex Product and Cloud Security challenges through a risk-based approach.

• Experience in establishing Secure SDLC frameworks and assessing DevSecOps programs.

• Experience in supporting recruitment, technical interview screening, and team development.

• Ability to innovate while balancing business and security requirements.

• Capability to articulate and enforce security measures across a diverse range of personnel.

• Proficient executive functioning and presentation abilities.

• Strong leadership, communication, interpersonal, analytical, prioritization, and deadline management skills.

• Minimal travel requirements (<10%).

• Knowledge of cybersecurity frameworks, risk management principles, and standards like NIST, ISO 27001, CIS, GDPR, FedRAMP, and Common Criteria.

• Cybersecurity certifications such as CISSP, CISM, CSSLP, or CCSP are preferred.

• Familiarity with Jira and Confluence.

• Background in software development.

• Must reside in the United States.

🏝️ Benefits

• Engaging work, a culture of innovation, and opportunities for career advancement.

• Competitive salary packages.

• Meaningful bonus program.

• Comprehensive healthcare insurance.

• Pension and retirement matching options.

• Extensive life insurance coverage.

• Employee assistance programs.

• Generous time off plans.

• Paid company holidays.

• Equity options.