Senior Manager, Security Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the Product Security and Security Operations teams, nurturing talent and ensuring accountability for measurable results.

• Develop strategies, operational plans, metrics, and resource priorities that align with Calendly’s most significant risks.

• Foster partnerships across Security and essential cross-functional teams to synchronize on risk management, response, and remediation efforts.

• Convey priorities, risk trade-offs, and program performance to senior leadership and cross-functional stakeholders effectively.

• Enhance product security capabilities, including threat modeling, application security testing, vulnerability management, and developer enablement.

• Oversee detection engineering, incident response, threat intelligence, monitoring, and threat hunting initiatives.

• Direct responses to high-severity incidents, complex investigations, and security reviews, ensuring lasting remediation of systemic issues.

• Set standards for control coverage and effectiveness across applications, cloud, identity, and endpoints.

• Oversee program budgets and manage strategic security vendors.

⛳️ Requirements

• A minimum of 7 years of experience in cybersecurity, focusing on product, application, or infrastructure security, along with security operations, incident response, or detection engineering.

• At least 4 years of experience managing proficient security engineers or multidisciplinary technical teams.

• Excellent communication skills with the ability to navigate sensitive decisions among technical teams and senior leadership.

• Proven experience in defining strategies and delivering measurable outcomes across various security disciplines.

• Background in building or scaling product security programs in collaboration with Product and Engineering teams.

• In-depth knowledge of secure software development, threat modeling, application security testing, vulnerability management, and cloud-native architectures.

• Strong understanding of incident response, detection engineering, SIEM, EDR, cloud security, and identity security.

• Demonstrated ability to translate vague risks into prioritized, cross-functional programs and drive remediation through influence.

• Experience managing budgets, MSSPs, testing firms, or other security providers.

• Must have authorization to work in the United States; Calendly does not offer immigration sponsorship.

🏝️ Benefits

• Top Performer Bonus program.

• Equity awards.

• Competitive benefits.

• Occasional travel for company events, team collaboration, or offsites.