Sr. Manager, Security — Continuous Monitoring v 2.0

Role overview Senior engineering leader for a security continuous monitoring function. The mission is to measure whether the organization's security controls are actually working across cloud, identity, SaaS, and enterprise systems, and to turn that measurement into reliable evidence for the security organization and its auditors. The team sits at the intersection of security engineering and governance, risk, and compliance, building automation in Python against cloud and SaaS APIs.

Responsibilities - Own the strategy, roadmap, and delivery of the continuous monitoring platform, including control state collection at cloud scale, posture assessment, GRC tooling integration, and remediation tracking. - Hire and grow security software engineers, develop senior individual contributors into technical leaders, and set a high bar for code review, reliability, observability, and documentation. - Demonstrate control posture against SOC 2, ISO 27001, FedRAMP, PCI DSS, and emerging AI governance requirements, prioritizing the controls whose failure would reduce risk most. - Build durable partnerships across GRC functions, IT, Legal, and Engineering, and advocate for the headcount and tooling the program needs. - Define what the program measures and why, and ensure that detected gaps are routed quickly to the teams that can close them.

Requirements - Demonstrated engineering management experience leading teams that write production code, with enough technical depth to review that work credibly. - Strong hands-on background with Python, data pipelines against cloud and SaaS APIs, and integration with security and GRC tooling. - Working knowledge of major security frameworks such as SOC 2, ISO 27001, FedRAMP, and PCI DSS, and how controls translate into measurable checks. - Familiarity with cloud infrastructure, identity systems, SaaS platforms, and the kinds of drift and coverage gaps that occur there. - Ability to set priorities based on risk reduction rather than audit convenience, and to communicate tradeoffs across technical and non-technical stakeholders.

Nice to have - Experience with secret leak scanning, asset vulnerability scanning, or static application security testing infrastructure. - Background developing senior engineers and growing engineering managers.

Benefits and work setup The listed base compensation is structured by geographic zone, with ranges from approximately $182,900 to $314,250 USD depending on location, plus potential eligibility for annual performance bonus, equity, and a comprehensive benefits package. Candidates in multiple locations are encouraged to apply.