Engineering Manager, Security (Cloud, Infrastructure & Application Security)

Quick Facts

• Role: Engineering Manager, Security (Cloud, Infrastructure & Application Security)

• Focus: Cloud, infrastructure, and application security; vulnerability management SLAs; Secure SDLC

Description

Lead security engineering teams that secure cloud, infrastructure, containers, and the code shipped to production. Own vulnerability management from code to cloud—driving remediation across engineering teams within SLA to meet compliance commitments. Partner with incident response while building secure-by-default workflows and developer enablement.

Responsibilities

• Build, lead, and mentor teams across cloud & infrastructure security and application security/secure SDLC

• Define roadmaps and quarterly OKRs for vulnerability management and secure development

• Set ownership, operating rhythms, and escalation processes; report security posture and metrics

• Own remediation SLAs by severity and ensure alignment to SOC 2, ISO 27001, PCI DSS, FedRAMP, and customer contracts

• Run remediation reviews, manage exceptions/risk acceptance, and automate workflows for routing to owners and escalation

• Lead audit-ready evidence generation and external audit collaboration for vulnerability management controls

• Lead CSPM/CNAPP strategy and cloud/Kubernetes/data security posture management (GCP primary)

• Secure SaaS platforms and multi-tenant/AI infrastructure with Platform/ML teams

• Own SCA, SAST, and IaC scanning programs end to end (tooling, CI/CD integration, tuning, noise reduction)

• Drive software supply chain security (dependency management, SBOMs, artifact signing, SLSA progression)

• Shift IaC security left via pull-request detection; feed findings into central SLA-based remediation

• Define and run Secure SDLC (security requirements, threat modeling, secure design reviews, risk-based release gates)

• Deliver developer security training and build a Security Champions network

• Support incident response with context, prioritization, and follow-up remediation from incidents/postmortems

• Feed incident learnings back into scanning rules, secure baselines, and training; communicate advisories and best practices

Benefits

• Competitive salary & equity

• 401(k) with 4% match (US only)

• Health, dental, vision, and life insurance

• Short-term and long-term disability

• Paid parental, medical, and caregiver leave

• Flexible time off (FTO) + holidays

• Commuter benefits (in-office & US only)

• Monthly wellness stipend

• Autonomous work environment

• In-office setup reimbursement (in-office only)

• Quarterly team gatherings

• In-office amenities (in-office only)