Senior Manager, Product Security Engineering – Security Posture, Supply Chain

This is a fully remote position, open to applicants in United States, +2 more countries.

📋 Description

• Oversee the structured implementation of GitLab security features across all projects, ensuring consistency with the Project Security Configuration Standard.

• Create secure defaults and streamlined processes that enhance engineering efficiency.

• Act as Customer Zero for GitLab security functionalities, providing adoption insights to Product and Engineering to guide roadmap planning.

• Develop software supply chain security protocols, which include governance of third-party components, trusted dependency management, and product-level SBOM specifications.

• Mitigate systemic risks across teams and namespaces, focusing on lateral movement and token governance.

• Manage the Product Security Risk Register, along with metrics and posture dashboards.

• Collaborate with the Compliance team to generate security-control documentation for audits, certifications, and internal maturity evaluations.

• Promote GitLab's software factory security initiatives externally through thought leadership.

• Lead, mentor, and expand the team while shaping its operational framework.

⛳️ Requirements

• Proven experience in managing a security or engineering team, including responsibilities for hiring, performance evaluation, and career development.

• Technical proficiency in security posture management, software supply chain security, and secure configuration within a large SaaS environment.

• Demonstrated success in executing large-scale, governed deployments of security capabilities across an engineering organization, maintaining adoption post-launch.

• Proficient in translating security requirements into achievable controls for engineering teams without impeding progress.

• Experience in generating control documentation for audits, certifications, or maturity assessments, and collaborating with Compliance or GRC counterparts.

• Capacity to generate measurable outcomes in a highly ambiguous environment, including fostering organizational consensus.

• Skill in breaking down complex problems into manageable, incremental successes that deliver results and build upon each other.

• Strong judgment and effective written communication skills in a fully remote, asynchronous setting.

• Team members are expected to integrate AI into their daily tasks.

🏝️ Benefits

• Comprehensive benefits to support your health, financial stability, and overall well-being.

• Flexible Paid Time Off.

• Participation in Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.