Engineering Manager, Security (Cloud, Infrastructure & Application Security)
Core
Lead teams securing cloud infrastructure, containers, and application code to drive vulnerability remediation within SLAs and meet compliance commitments.
Role type
Engineering Manager, Security (Cloud & Infrastructure)
Builds
Secure cloud environments, containerized applications, and secure SDLC processes for a developer platform.
Domain
Cloud Security, Infrastructure Security, Application Security
Required skills
Cloud security (GCP, AWS, Azure), Vulnerability management, Secure SDLC, Kubernetes security, CSPM/CNPP tooling, SCA/SAST/IaC scanning, Compliance frameworks (SOC 2, ISO 27001, PCI DSS, FedRAMP), Team leadership, Automation scripting
Preferred skills
Multi-tenant SaaS security, AI/ML infrastructure security, Software supply chain frameworks (SLSA, SBOM), Security Champions programs, External audit leadership
Technologies
GCP, AWS, Azure, Kubernetes, Terraform, Wiz, Orca, Prisma Cloud, Lacework, Snyk, Semgrep, CodeQL, Checkmarx, Socket, Dependabot, Checkov, tfsec
Responsibilities
Build and mentor security engineering teams; Define multi-year security roadmap and OKRs; Own remediation SLAs for cloud, infrastructure, and code findings; Partner with engineering to prioritize and land fixes; Manage exception and risk-acceptance processes; Build automated workflows for finding tracking and escalation; Lead security side of external audits; Track and report security metrics (SLA attainment, MTTR, backlog age); Secure critical SaaS platforms and multi-tenant infrastructure; Drive Secure SDLC program including threat modeling and release gates; Develop security training and paved roads for developers; Support incident response with context and follow-up remediation.
Seniority
Manager, hands-on IC with people leadership
