Manager, Product Security

Role overview Lead and mature a product security program spanning application and cloud security. The role combines team leadership with hands-on strategic direction: embedding security into development workflows, improving vulnerability management, and helping product teams deliver secure designs with minimal friction. This is a fully remote position based in the United States, with travel expected to remain below 10%.

Responsibilities - Define and execute a product security operating model across people, processes, and technology, using agile and DevSecOps practices. - Partner with product development teams to integrate security activities and enable developers. - Lead application security reviews and threat modeling, recommending mitigations based on risk. - Oversee vulnerability management processes and service-level commitments. - Guide architects and engineers in assessing current security architecture, setting target designs and multi-year roadmaps, and responding to potential incidents and root-cause investigations. - Manage program plans, resources, and stakeholder communications; report progress to executives and auditors and address security questions from customers.

Requirements - Eight or more years of relevant product, application, and cloud security experience; product security leadership experience is preferred. - Track record of resolving complex security issues and applying risk-based protection to products. - Experience establishing secure development lifecycle practices and integrating security into DevSecOps with product teams. - Ability to lead, develop, and support a security team, including recruiting and technical interviews. - Strong analytical, communication, and presentation skills, with the ability to influence stakeholders and balance business needs with security. - Bachelor’s degree in computer science, information security, business administration, or a related field; a master’s degree is preferred.

Nice to have - Knowledge of frameworks and standards such as NIST, ISO 27001, CIS, GDPR, FedRAMP, or Common Criteria. - Security certifications such as CISSP, CISM, CSSLP, or CCSP; software development background; or familiarity with Jira and Confluence.

Benefits and work setup - Remote work within the United States and minimal travel. - Benefits include healthcare coverage, retirement matching, life insurance, employee assistance, paid time off, and company holidays.