Remote Product Security Engineering Manager

dragos; United States; Remote; USD 187,000 - 253,000; Full time

Job summary

Dragos is seeking a Manager, Product Security Engineering to lead and grow a security team while remaining hands-on in vulnerability hunting, remediation, and compliance initiatives. You will drive certification programs (SOC 2, ISO 27001, DISA STIG), develop roadmaps, and collaborate with Compliance, Legal, and Sales Engineering to meet customer obligations.

The role blends leadership with technical contribution in a remote-first environment across North America, Europe, the Middle East, and

Qualifications

• 5+ years direct cybersecurity or product security experience.
• 1–2+ years leading or managing a security engineering team.
• Experience with obtaining or maintaining SOC 2 Type II, ISO 27001, FedRAMP or DISA STIGs.
• Hands-on contributor while leading teams in security engineering.
• Experience with cloud security (AWS/Azure/GCP) and on-prem environments.

Responsibilities

• Lead and mentor the product security engineering team, including hiring, career development, and performance management.
• Own certification and accreditation initiatives (DISA STIG, SOC 2, ISO 27001, etc.).
• Translate strategy into an executable roadmap and hold the team accountable.
• Remain hands-on with vulnerability remediation, SAST/DAST tooling, and PSIRT response.
• Coordinate with Compliance, Legal, and Sales Engineering for audits and certifications.
• Track certification posture, audits, and remediation SLAs to leadership.
• Develop processes to collect evidence for renewals and audits.
• Foster a strong technical community among Engineering Managers.

Skills

Cybersecurity

Team leadership

CI/CD security

Cloud security

Communication

Tools

SAST/DAST tooling

Job description

Dragos is seeking a Manager, Product Security Engineering to lead and grow a security team while remaining hands-on in vulnerability hunting, remediation, and compliance initiatives. You will drive certification programs (SOC 2, ISO 27001, DISA STIG), develop roadmaps, and collaborate with Compliance, Legal, and Sales Engineering to meet customer obligations.

The role blends leadership with technical contribution in a remote-first environment across North America, Europe, the Middle East, and