Senior Manager of Security

LaunchDarkly Group; United States; À distance; USD 180 000 - 240 000; Plein temps

Avantages offerts par ce poste

Full Vision

Full Dental

Full Medical

Flexible Schedule

Healthy Lunches & Snacks

Conference & Meetup Access

Education Stipend

Personalized Work Station

Close to Public Transportation

Bike Parking

Team Activities

Unlimited paid time off policy

Work from home opportunities

Health insurance

Résumé du poste

LaunchDarkly Group seeks a senior security leader to run the Product Security team and partner with the Director of Security. The role builds a risk-based operating model, where engineering teams own security health and Security informs and validates through automation and AI as the first responder to findings.

You’ll manage a team of security engineers, act as incident manager of record, and oversee vendor/access approvals.

Qualifications

• Must have senior security leadership experience leading security teams.
• Experience guiding security program development from gatekeeper to team ownership.
• Strong incident management experience for SaaS environments and external communications.

Responsabilités

• Lead the Product Security team and partner with the Director of Security.
• Own security operating model driven by risk, with engineering teams owning security health.
• Serve as incident manager of record for security incidents and manage vendor/access decisions.
• Drive automation and AI as first responders to findings; publish quarterly posture to executives.
• Work with engineering teams to make the secure path the easy path and prioritize work.

Connaissances

Security leadership

Incident management

Program management

Communication with stakeholders

Risk thinking

Description du poste

• We’re looking for a senior security leader to run our Product Security team and partner to the Director of Security


• In this role, you’ll own how Security operates: a program led by risk rather than audit calendars, where engineering teams own their security health and Security informs, guides, and validates, where automation and AI take the first pass on every finding, and where posture is measured and published to executives every quarter


• You’ll build that model, starting with Product Security and extending across the division


• You’ll bring a balance of people management, security judgment, and program leadership as you manage a team of security engineers, act as incident manager of record, hold delegated approval for vendor and access decisions, and run the division when the Director is in an audit, a board cycle, or on vacation


• You’ll work closely with every engineering team to make the secure path the easy one


• Manage the portfolio of your team’s work, appropriately managing everyone’s time and assigning them to the highest priority work


• Help your team and the engineering organization make sense of, and simplify, how security work gets done: who owns what, what is automated, and what Security stops doing


• Guide product engineering teams in owning their own security health: findings route to them with mapped severity, Security reviews and validates rather than fixes, and each team sees its security health in its own service review


• Own the wiring and routing of security findings and requests, driving down noise and the human-decision rate across intake, triage, and review


• Serve as incident manager of record for security incidents: first escalation for our service-level commitments, delegated approver for vendor and access decisions, and cover for the Director’s operational duties


• Publish posture: monthly service-level attainment to engineering, quarterly posture to the executive team, and a risk register that drives priorities

Benefits

• Full Vision


• Full Dental


• Full Medical


• Flexible Schedule


• Healthy Lunches & Snacks


• Conference & Meetup Access


• Education Stipend


• Personalized Work Station


• Close to Public Transportation


• Bike Parking


• Team Activities


• Unlimited paid time off policy


• Work from home opportunities


• Health insurance

You have led a security team out of the gatekeeper model once already, and you can say what teams owned afterward, what Security stopped doing, and what the numbers didYou were a strong Senior or Staff security engineer before you managed, and you can still read a PR, a threat model, or a cloud finding and make a callYou treat automation and AI as the first responder and yourself as the escalation pathYou track and drive metrics, and you understand what they can and can’t tell youYou have been the second leader to a director or CISO and know which decisions to make in their nameYou think in risk, not control lists, and you would rather defend a priority call than a checklistYou have run security incidents end to end, including the comms and the review afterwardFamiliarity with AWS security at scale and with external audits (SOC 2, ISO 27001, or FedRAMP) as a participant or control owner5+ years of experience in a formal security or engineering management role, including managing senior engineersExcellent communication skills with both technical and non-technical stakeholdersExperience as incident manager for security incidents at a SaaS company, including external communicationThe ability to track and drive metrics, and the wisdom to understand what they can and can’t tell youA thoughtful, empathetic approach to leadership and collaborationExperience guiding teams through technical tradeoffs and developing senior engineers’ careersExperience moving a security function from gatekeeper to team ownership, with measurable results