Security TPM: Lead Vulnerability & Cloud Security (Hybrid)

Fivetran, Inc.; Oakland (CA); Hybrid; USD 158,000 - 198,000; Full time

Benefits offered by this job

Employer-paid medical insurance

Generous PTO and holidays

Professional development

Team events

Cell phone stipend

Mental health resources

Job summary

Fivetran, Inc. in Oakland, CA is seeking an experienced Technical Program Manager (Security TPM) to lead security initiatives across engineering.

You will own vulnerability management programs for infrastructure, code, and dependencies, and partner with product, SRE/QE, and security teams to embed security into the development lifecycle. The role spans cloud security, vulnerability management, and secure SDLC practices in a multi-cloud (AWS, GCP, Azure) setup, with AI-assisted tooling and

Qualifications

• 5+ years in technical program management with a security focus.
• Experience with cloud security and vulnerability management.
• Strong collaboration with product, SRE/QE, and development teams.
• Knowledge of OWASP Top 10 and ASVS.
• Experience with SAST/DAST and automation tools.

Responsibilities

• Lead security vulnerability management for infrastructure, code, and dependencies.
• Collaborate with Security and Engineering to identify, prioritize, and patch vulnerabilities.
• Improve security processes, evaluate tools, and drive automation.
• Define roadmaps for proactive security using risk assessment.
• Lead code scanning programs with multiple teams to ensure secure delivery.
• Balance time across programs while maintaining focus on security posture.

Skills

Security engineering

Vulnerability management

Cloud security

Application security

SAST/DAST tools

Automation scripting

Threat modeling

SDLC security

OWASP ASVS

Cross-functional collaboration

Tools

AWS

GCP

Azure

Job description

Fivetran, Inc. in Oakland, CA is seeking an experienced Technical Program Manager (Security TPM) to lead security initiatives across engineering.

You will own vulnerability management programs for infrastructure, code, and dependencies, and partner with product, SRE/QE, and security teams to embed security into the development lifecycle. The role spans cloud security, vulnerability management, and secure SDLC practices in a multi-cloud (AWS, GCP, Azure) setup, with AI-assisted tooling and