Security TPM: Lead Cloud Vulnerability & DevSecOps

United States Digital Space LLC; Oakland (CA); Hybrid; USD 180,000 - 235,000; Full time

Job summary

dbt Labs is seeking a high-performance, hands-on technical program manager (TPM) in the security domain to lead security initiatives across the organization from our Oakland, CA base. You will bridge engineering and business stakeholders while coordinating vulnerability management across infrastructure, code, and dependencies.

The role requires strong experience in security engineering, cloud security, and program management, with a focus on proactive risk reduction across AWS, GCP, and Azure

Qualifications

• Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security.
• Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives.

Responsibilities

• Execute the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities.
• Collaborate with Security and Engineering teams to identify, prioritize, and patch vulnerabilities; provide oversight for timely remediation.
• Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution.
• Utilize AI to define the roadmap for proactive security based on risk assessments.
• Lead dependency management and image hardening programs to improve security posture.
• Establish and lead a code scanning program with multiple teams to ensure secure development practices.
• Dedicate up to 20% of time to assess business systems for vulnerabilities and compliance gaps; develop scanning plans and standards.
• Advocate for shift-left security by integrating security/testing early in the development lifecycle.

Skills

Security engineering

Vulnerability management

Cloud security

Program management

Cross-functional collaboration

Tools

Terraform

Docker

Kubernetes

Job description

dbt Labs is seeking a high-performance, hands-on technical program manager (TPM) in the security domain to lead security initiatives across the organization from our Oakland, CA base. You will bridge engineering and business stakeholders while coordinating vulnerability management across infrastructure, code, and dependencies.

The role requires strong experience in security engineering, cloud security, and program management, with a focus on proactive risk reduction across AWS, GCP, and Azure