Manager, Product Security Engineering

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The Manager, Product Security Engineering will lead a team of security engineers while remaining actively involved in technical security initiatives. This role is responsible for building team capability, improving security maturity, maintaining compliance readiness, and ensuring product security objectives are delivered effectively.

• Manage, mentor, and develop a product security engineering team, including senior-level security professionals, through hiring, coaching, career development, and performance management.
• Own and drive certification and accreditation initiatives, including SOC 2, ISO 27001, DISA STIG hardening, authorization processes, and other customer or regulatory requirements.
• Translate security strategies into actionable roadmaps, priorities, and measurable delivery plans while maintaining alignment with engineering objectives.
• Remain hands-on by contributing to vulnerability remediation, security assessments, SAST/DAST implementation, security tooling improvements, and incident response activities.
• Guide vulnerability management efforts, including identifying and addressing advanced vulnerabilities and ensuring remediation work aligns with business priorities and compliance deadlines.
• Partner with Compliance, Legal, Sales Engineering, and customer teams to support security questionnaires, audits, certification renewals, and customer assurance activities.
• Establish efficient evidence collection, documentation, and reporting processes to maintain audit readiness.
• Track and communicate certification status, vulnerability remediation progress, and security performance metrics to engineering leadership.
• Foster collaboration across engineering teams and promote strong security practices throughout the product development lifecycle.

Requirements:

The ideal candidate is an experienced cybersecurity leader with a strong background in product security, compliance, and engineering collaboration. This role requires a balance of technical expertise, team leadership, and the ability to operate effectively in a fast-moving environment.

• 5+ years of direct experience in cybersecurity, product security, or related security engineering roles.
• 1–2+ years of experience managing, leading, or mentoring security engineers, or demonstrated player-coach leadership experience.
• Proven experience obtaining or maintaining security certifications and compliance programs such as SOC 2 Type II, ISO 27001, FedRAMP, or similar frameworks.
• Hands-on experience with DISA STIG hardening, authorization processes, or security accreditation initiatives.
• Experience implementing SAST/DAST tools and integrating security practices into CI/CD pipelines.
• Strong understanding of security principles across cloud environments (AWS, Azure, GCP), on-premise infrastructure, and virtualized environments.
• Ability to balance people management responsibilities with individual technical contributions.
• Strong communication skills with the ability to collaborate effectively with engineering, compliance, legal, sales, and customer-facing teams.
• Experience working within Agile development environments and cross-functional product organizations.
• Knowledge of industrial control systems (ICS) or operational technology (OT) security is a plus.
• Strong problem-solving skills, ownership mindset, and ability to drive initiatives independently.

Benefits:

• Competitive salary of $220,000.
• Competitive equity package.
• Comprehensive benefits plan.
• Remote-first work environment with flexibility and autonomy.
• Opportunity to lead impactful cybersecurity initiatives protecting essential infrastructure.
• Ability to influence product security strategy and build scalable security practices.
• Collaborative culture built around transparency, trust, and technical excellence.
• Opportunity to work with talented cybersecurity professionals across global teams.