Senior Manager, Product Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and implement the strategy, roadmap, operating model, and success metrics for product security.

• Recruit, manage, mentor, and nurture the growth of product security engineers.

• Collaborate with engineering, product, infrastructure, legal, compliance, and executive stakeholders.

• Implement security practices throughout the software development lifecycle, which includes security requirements, architecture reviews, threat modeling, testing, and remediation.

• Leverage AI and automation for automated reviews, vulnerability triage, risk identification, and agentic security workflows.

• Identify and mitigate risks associated with AI-powered features and systems.

• Provide guidance on secure architectures and platform controls for cloud-native, multi-tenant products.

• Create frameworks for identifying, communicating, prioritizing, and accepting product security risks.

• Oversee the product vulnerability management lifecycle and facilitate risk-based remediation.

• Develop or support secure-by-default tooling, paved roads, and automated controls utilizing Tines, CI/CD integrations, and AI-driven capabilities.

• Direct product security initiatives during incidents, coordinating investigation and remediation efforts, participating in the on-call program, and applying lessons learned.

• Cultivate security champions, training programs, documentation, and technical guidance.

• Establish measures for product security effectiveness and communicate risks, investments, progress, and tradeoffs.

• Assist in security discussions with customers and partners and coordinate independent security assessments.

⛳️ Requirements

• Over 8 years of experience in application security, product security, or related security engineering roles, with a focus on securing cloud-native SaaS products.

• At least 5 years of experience in people management or technical leadership.

• Proven ability to define product security strategy, convert strategy into an actionable roadmap, and prioritize investments based on business and technical risks.

• Strong technical expertise in modern application security, secure architecture, threat modeling, OWASP Top 10, and secure SDLC practices.

• Experience collaborating with engineering and product leaders to achieve security objectives.

• Familiarity with utilizing AI and automation to enhance security programs.

• Experience securing cloud environments, ideally AWS, and containerized infrastructure using Docker and Kubernetes.

• Proficient in modern programming languages with the ability to assess code, architecture, and technical designs.

• Experience with application security testing and vulnerability management tools, including SAST, DAST, SCA, secrets detection, and CI/CD security integrations.

• Strong understanding of DevSecOps practices and secure-by-default developer workflows.

• Experience leading or managing product security incident responses.

• Excellent written and verbal communication skills.

• Background in operating a public vulnerability disclosure or bug bounty program.

• Strong judgment, analytical skills, and organizational abilities.

• Leadership style based on trust, clarity, empathy, accountability, and technical engagement.

• Must have authorization to work for any employer in the U.S.; visa sponsorship is not available.

🏝️ Benefits

• Equity

• Equal employment opportunities