Senior Manager, Security Engineering

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the security engineering division responsible for safeguarding 6sense’s AI-driven, cloud-native SaaS platform.

• Manage Vulnerability Operations, Infrastructure Security, and Application/Product Security.

• Create a cohesive security engineering operating model across three teams.

• Collaborate with leaders in Product, Engineering, Cloud Infrastructure, Data, AI/ML, Security Operations, Privacy, GRC, and Enterprise Technology.

• Lead, mentor, and develop managers and engineers based in the United States and India.

• Define role clarity, career development paths, succession planning, and performance expectations.

• Develop workforce and capacity plans that are aligned with product growth, AI investments, risk management, and business priorities.

• Own the AI product security strategy from its design phase through to production.

• Address AI-specific risks such as prompt injection, insecure tool or agent access, sensitive data exposure, model and data pipeline integrity, excessive agency, misuse, and dependencies on third parties.

• Enhance secure software development lifecycle controls, including code and design reviews, application security testing, penetration testing, security champions, and vulnerability disclosure or bug bounty programs.

• Manage vulnerability discovery, prioritization, remediation governance, exception management, and validation across applications, cloud infrastructure, containers, endpoints, operating systems, and third-party components.

• Accelerate remediation processes through automation, service-level objectives, ownership, and reporting.

• Establish security measures for software supply chains, covering dependencies, build systems, artifacts, secrets, and CI/CD pipelines.

• Manage AWS security guardrails for infrastructure as code, containers, IAM, networks, workloads, secrets, logging, and data services.

• Promote least privilege access, secure administrative accesses, workload identities, segmentation, configuration assurance, and ongoing cloud risk reduction.

• Convert business strategies, product roadmaps, AI priorities, threats, customer commitments, and audit requirements into a multi-quarter roadmap.

• Define OKRs, KPIs, and KRIs.

• Communicate risks and trade-offs effectively to technical leaders and executives.

• Maintain policies, standards, control evidence, inventories, and procedures to support SOC 2, ISO 27001, privacy, customer assurance, and other obligations.

• Assess and rationalize security tools and services.

• Measure risk reduction, security coverage, engineering speed, AI security readiness, operational maturity, people leadership, and stakeholder trust.

⛳️ Requirements

• At least 8 years of experience in information security, with significant expertise in product or application security, cloud security, vulnerability management, or security engineering.

• Minimum of 3 years leading security engineering teams, including distributed or cross-region teams.

• Experience in building and enhancing security programs in a cloud-native SaaS context, ideally on AWS.

• Practical knowledge of secure development lifecycle practices, application security testing, cloud-native infrastructure, containers, infrastructure as code, software supply chains, and vulnerability operations.

• Working understanding of AI and machine learning security risks and their controls.

• Capability to assess technical risk, make informed trade-offs, and translate strategy into actionable roadmaps, operating mechanisms, and measurable results.

• Strong communication skills, both executive and technical.

• Familiarity with NIST Secure Software Development Framework, OWASP guidelines, OWASP guidance for large language model applications, MITRE ATLAS, CIS Benchmarks, NIST 800-53, SOC 2, and ISO 27001.

• Understanding of threat modeling, architecture reviews, static and dynamic testing, code reviews, penetration testing, security champions, API security, and bug bounty or coordinated disclosure initiatives.

• Knowledge of AWS, cloud security posture management, cloud-native application protection, IAM, containers, Kubernetes, infrastructure as code, secrets management, operating system hardening, and logging.

• Familiarity with vulnerability scanners, risk-based prioritization, dependency and artifact security, SBOMs, build pipelines, remediation governance, and exception management.

• Understanding of AI security aspects including model and data access, prompt injection, permissions for agents and tools, retrieval security, output management, data leakage prevention, red teaming, abuse monitoring, and risks from third-party AI services.

• A bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience is preferred.

• Relevant certifications such as CISSP, CISM, GIAC, or an advanced cloud security certification are preferred.

• Experience in leading managers is preferred.

• Strong preference for those with experience securing LLM, agentic, or retrieval-augmented generation features.

• Preferred experience in a high-growth B2B SaaS organization and customer-facing security assurance.

🏝️ Benefits

• Potential inclusion of a bonus program or commission plan.

• Stock options may be granted pending approval from 6sense’s board.

• Comprehensive health insurance coverage.

• Life insurance benefits.

• Disability insurance coverage.

• 401K employer matching program.

• Paid holidays.

• Self-care days.

• Paid time off (PTO).

• Paid parental leave.

• Equipment and support for remote work and collaboration with teams in offices.

• Access to LinkedIn Learning.

• Opportunities for learning and development initiatives.

• Quarterly wellness education sessions.

• Wellness days.

• Events hosted by Employee Resource Groups (ERGs).