Senior Manager, IT Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead, mentor, and provide support to a specialized security team encompassing SecOps, AppSec, CloudSec, and GRC.

• Manage security operations capabilities, which include SOAR, infrastructure hardening, vulnerability management, and coordinating patch management.

• Represent Castlight’s security stance to both prospective and existing customers.

• Address security terms in contracts, assist in developing technical responses for complex RFPs, and lead security defense discussions with client CISOs and risk teams.

• Act as the primary technical liaison to customers during security incidents or critical vulnerabilities.

• Convert technical remediation into executive-level communication in collaboration with the CISO and Engineering leadership.

• Perform technical reviews and guide AppSec standards throughout GitHub Actions and deployment pipelines.

• Design secure cloud infrastructure patterns on Google Cloud Platform.

• Collaborate with the internal audit team to integrate controls and ensure alignment with SOC 2, HITRUST, and NIST standards.

• Supervise vulnerability management and incident response escalations.

• Coordinate containment, remediation, and recovery efforts in response to emerging threats.

• Establish and monitor SecOps KPIs, which include vulnerability remediation timelines, patch compliance, and security configuration drift.

⛳️ Requirements

• Over 7 years of progressive experience in information security, showcasing a successful track record in leading, coaching, and mentoring technical security engineers in a player-coach role.

• Proven ability to engage directly with enterprise customer security leaders, procurement specialists, and health plan CISOs.

• Experience in reviewing security contract terms, supporting enterprise RFPs, and conveying complex security postures to external stakeholders.

• Practical experience in Application Security, including DAST, secure SDLC, and CI/CD pipeline controls.

• Experience in Cloud Security architecture, particularly focusing on cloud platforms and containerized/microservice ecosystems.

• Familiarity with SOC 2, HITRUST, and NIST frameworks, with a history of implementing technical controls and facilitating auditability.

• Outstanding communication and presentation skills, capable of explaining root causes, blast radius, and remediation plans to client leadership.

• Proven ability to collaborate effectively with Engineering, Product, Legal, and executive leadership.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday schedule.

• Opportunities for professional growth and development.

• Flexible work arrangements and a supportive work environment.