Senior Manager, Security Engineering

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the Security Engineering team within Spotnana's global Security organization.

• Manage Security Engineering for Spotnana's travel platform and corporate systems.

• Develop a team of security engineers and integrate security into Spotnana's software development process.

• Recruit, train, and supervise security engineers specializing in application, cloud, and infrastructure security.

• Take ownership of the Security Engineering strategy for the current and upcoming quarters.

• Lead the secure software development lifecycle program and establish standards across Engineering teams.

• Conduct security design reviews for new features, partner APIs, payment processes, and AI functionalities.

• Prioritize resolutions for security issues and escalate overdue critical concerns.

• Align security objectives with business and development teams to maintain them on the project roadmap.

• Manage SDLC, change management, and cloud configuration controls for PCI DSS, SOC 2, and ISO 27001 audits alongside the GRC team.

• Oversee the annual external penetration testing and maintain relationships with Security Engineering tool vendors.

• Distribute team resources across various projects, design assessments, and findings.

• Recommend headcount, tools, and vendor expenditures in the annual budget.

• Present team metrics, including open findings by severity and review cycle duration, to Security leadership.

• Report directly to the Head of Security & IT.

⛳️ Requirements

• A minimum of 10 years of experience in security engineering.

• At least 3 years of experience managing security engineers.

• Proven track record of hiring, nurturing, and evaluating the performance of security engineers.

• In-depth knowledge in at least one area of application security, cloud security (AWS), or infrastructure security, along with familiarity in the others.

• Experience with a secure SDLC program, including threat modeling, code and dependency scanning, and security assessments in CI/CD pipelines.

• Ability to influence without formal authority and communicate effectively with engineers, executives, and auditors.

• Familiarity with PCI DSS, SOC 2, or ISO 27001 audits.

• Proficient in at least one programming language, with the capability to review code and implement security automation.

• Knowledge of Java, Golang, and Python is highly advantageous.

• Experience with an API-driven, multi-region SaaS platform is a plus.

• Understanding of security risks associated with Artificial Intelligence and Machine Learning features is beneficial.

• Background in travel technology or payments is an additional advantage.

• Candidates must be legally authorized to work in the United States.

• Must not require current or future employment sponsorship.

• Must be able to participate in virtual interviews, face-to-face discussions, and coding assessments.

🏝️ Benefits

• Equity in the form of stock options, providing partial ownership in the company.

• Pre-tax and ROTH 401(k) options through Fidelity with a company match of up to 4%.

• Comprehensive benefit plans including medical, dental, vision, life, and disability coverage effective from the date of hire.

• 100% coverage of employee premiums and 85% coverage for eligible dependents.

• Pre-tax flexible spending account options available for health, dependent care, and commuter expenses.

• Flexible Paid Time Off (PTO).

• 10 designated company holidays.

• Company-wide shutdown at the end of the year.

• Up to 26 weeks of Parental Leave.

• Monthly stipend for cell phone/internet expenses.

• IATAN travel membership.

• Pet insurance options.

• Access to financial wellness tools.

• Subscription to the Calm app.

• Annual performance-based bonus.

• Comprehensive benefits package.