Security Engineering Manager

Redwood Trust Inc; Englewood (CO); On-site; USD 180,000 - 200,000; Full time

Benefits offered by this job

Discretionary bonus program

Multiple health plans

STD and LTD options

Company-sponsored life insurance

Fitness reimbursement

Paid parental leave

Volunteer time

Paid Time Off

ESPP

401(k) matching

Job summary

Redwood Trust Inc. is seeking a Security Engineering Manager in Englewood, CO to lead and grow a security engineering team responsible for cybersecurity design, implementation, and operations.

The role partners with infrastructure, engineering, data, and audit teams to translate risk into business actions, while owning core controls and incident response in a growing security program.

Qualifications

• Eight or more years in security engineering or security operations.
• Two+ years in a managerial or technical lead role.
• Experience with incident response and security operations.
• Proficiency with Azure security services and IAM.
• Ability to drive vulnerability management at scale.
• Experience mapping security solutions to business needs.
• Familiarity with NIST/CIS frameworks and audits.
• PowerShell or Python scripting with CI/CD/IaC knowledge.
• Broad knowledge across IAM, SIEM, firewalls, encryption, MFA, MDM, OS, networking and virtualization.
• Strong written and verbal communication for non-technical stakeholders.

Responsibilities

• Lead, hire, and develop a team of security engineers with clear standards.
• Drive cybersecurity initiatives and designs for operational needs and environment.
• Oversee core security controls across identity, endpoint, network, cloud, email, data.
• Own IAM architecture and access provisioning/deprovisioning processes.
• End-to-end vulnerability management, patching, and SLAs with teams.
• Advance detection engineering and incident response; coordinate with MSP.
• Create and maintain security policies aligned to NIST CSF.
• Embed security into delivery via pipelines, IaC guardrails, secrets.
• Support SOX IT general controls and regulatory obligations.
• Develop executive dashboards for security tech KPIs and KRIs.
• Manage outsourced vendors, tool evaluations, renewals, and budget.
• Participation in after-hours on-call rotation.

Skills

Security leadership

Incident response

Security operations

SIEM management

Cloud security (Azure)

IAM & access management

Vulnerability & patch management

Regulatory mapping (NIST/CIS)

Scripting/automation (PowerShell/Py)

CI/CD & IaC awareness

Networking/VPN/IDS/IPS

Communication to execs

Education

Bachelor’s degree related to CS/IS/Business

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Security Engineering Manager

*Regular Full-Time Associate Englewood, CO, US

Salary Range: $180,000.00 To $200,000.00 Annually

Redwood Trust, Inc. (NYSE: RWT), together with its subsidiaries, is a specialty finance company focused on investing in mortgage related assets, and engaging in residential and commercial mortgage banking activities. Our employees are a team of disciplined, dedicated and talented professionals who do what it takes to make the Company a leader in innovation and reputation. We value everyone's contribution, actively soliciting feedback at all levels within the organization. Work gets done in a non-hierarchical, hard-working and fun environment.

For more information about our Company, please look up the Redwood Review, published quarterly, available on our website www.redwoodtrust.com .

Position Summary

The Security Engineering Manager is responsible for cybersecurity design, implementation, and maintenance in alignment to business initiatives. The individual leads the team that builds and operates the controls protecting Redwood’s technology and digital assets, and acts as an escalation point for security operations, threat remediation, and incident response.

This is a working leadership role. The manager develops a small team of engineers while staying directly involved in architecture, tooling, and incident handling. The security program at Redwood is being built out deliberately rather than inherited, so this role carries real influence over what we standardize on, how detection and response operate, how we work with our managed security service provider, and how our engineering practices scale.

The successful candidate works closely with decision makers to identify, recommend, develop, implement, and support cost-effective security solutions. They partner with infrastructure, platform engineering, application development, data, and database teams, as well as internal audit, legal, and enterprise risk, and translate technical risk into terms the business can act on.

Responsibilities & Duties

• Lead, hire, and develop a team of security engineers, setting technical standards and clear expectations for the work they produce.
• Lead cybersecurity engineering initiatives and implement designs that meet specific operational needs and environmental factors, and continuously assess systems, networks, and data to determine what defenses are necessary.
• Own the design and operation of core security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on the Microsoft security stack including Entra ID, Defender, Sentinel, Purview, and Intune.
• Own Identity and Access Management architecture and standards, including user access provisioning and deprovisioning processes, periodic access reviews, and related reporting.
• Run vulnerability management and patching end to end, including scanning, testing, and remediation, and negotiate ownership and service levels with infrastructure, application, and database teams.
• Mature detection engineering and incident response capability, lead investigations into security breaches or intrusions, and manage the operational relationship with our managed security service provider.
• Create and maintain security policies, standards, and procedures aligned to the NIST Cybersecurity Framework, and keep them current as the environment changes.
• Embed security into delivery through pipeline controls, infrastructure as code guardrails, secrets management, and secure configuration baselines.
• Support regulatory and control obligations including SOX IT general controls.
• Develop executive reporting for key security technologies, including Key Performance Indicators and Key Risk Indicators, for the CTO, executive leadership, and the board.
• Manage outsourced security vendors, tooling evaluations, renewals, and a portion of the security budget, including consolidation decisions where coverage overlaps.
• Participate in the after-hours on-call rotation for incident response.
• Other duties as assigned.

Required Experience & Education

• Bachelor’s degree related to Computer Science, Business, or Information Systems preferred, or equivalent experience.
• Eight or more years in security engineering or security operations, including at least two years leading engineers as a manager or technical lead.
• Expertise in incident response, security operations, SIEM management, and security policy creation.
• Depth in cloud security on Azure, including identity and access management, network controls, and native security tooling.
• Practical knowledge of vulnerability and patch management at enterprise scale, with the ability to drive accountability across teams outside of direct reporting lines.
• Experience analyzing and documenting cybersecurity solutions and mapping them to business requirements.
• Familiarity with NIST and CIS frameworks and experience supporting audits or regulatory examinations.
• Scripting and automation ability in PowerShell, Python, or similar, with enough fluency in CI/CD and infrastructure as code to review the team’s work.
• Working knowledge across IAM, SIEM, firewalls and proxies, encryption, IDS and IPS, MFA, MDM, Windows Server and Linux, networking, and virtualization.
• Ability to set and change priorities amongst multiple competing constituencies.
• Strong written and verbal communication, including the ability to explain risk and tradeoffs to non-technical stakeholders.

Preferred Skills

• CISSP, CISM, CCSP, GIAC, or Azure security specialty certifications.
• Experience in financial services, mortgage, or another regulated industry.
• Experience with Fortinet, SASE, or zero trust network access deployments.
• Exposure to securing AI and machine learning workloads.
• Experience standing up or maturing a security program rather than operating an established one.

A reasonable estimate of the total compensation range for this role is $180,000.00 200,000.00. The actual salary offer will depend on job-related factors including education, geographic location, training, licensure and certification, and experience.

• discretionary corporate bonus program
• multiple health plans
• STD and LTD options
• company-sponsored life insurance
• fitness reimbursement
• paid parental leave
• volunteer time
• Paid Time Off
• ESPP
• 401(k) matching

Equal Opportunity Statement

At Redwood Trust, we are committed to fostering an inclusive workplace where diversity is valued and everyone has the opportunity to thrive. We welcome applications from individuals of all backgrounds and experiences. We are an equal opportunity employer and do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.