Sr. Manager, Security Engineering

6Sense Insights; United States; Remote; USD 205,000 - 254,000; Full time

Benefits offered by this job

Health insurance

401K plan

Stock options

Paid holidays

Job summary

6sense seeks a Senior Manager, Security Engineering to lead the security engineering organization protecting our AI-enabled, cloud-native SaaS platform. This leader oversees Vulnerability Operations, Infrastructure Security, and Application/Product Security across the United States and India, balancing strategic leadership with credible technical judgment.

The role requires building an integrated security operating model, partnering with Product, Engineering, Cloud Infrastructure, and Data teams

Qualifications

• 8+ years in information security with product or security engineering focus.
• 3+ years leading security engineering teams, including distributed or cross-region teams.
• Experience building security programs in cloud-native SaaS, preferably on AWS.
• Knowledge of AI security risks and controls.

Responsibilities

• Oversee security engineering across US and India teams.
• Define secure patterns for AI-enabled products and cloud infrastructure.
• Own vulnerability operations and remediation governance.
• Align security strategy with product roadmaps and regulatory requirements.
• Communicate risks and decisions to executives with evidence-based reporting.

Skills

Security leadership

Security engineering

Cloud security

AI security

Education

Bachelor's degree in cybersecurity

Tools

AWS

CI/CD

Job description

6sense's mission is to multiply what matters: growth, retention, and efficiency. We envision a future where companies, teams and people reach their full potential.

Our People:

People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Win as One Team, Stay Curious, Do The Right Thing, Own the Outcome, and Create Belonging. Every 6sensor plays a part in defining the future of our industry-leading technology. 6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers. We want 6sense to be the best chapter of your career.

Senior Manager, Security Engineering

Business Technology, Security

REPORTING AREA

Security - CISO

FUNCTION

Business Technology

TEAM MODEL

United States and India

LEADERSHIP SCOPE

Application/Product Security; Infrastructure/Cloud Security; Vulnerability Management

ROLE TYPE

Leader with technical depth

ENVIRONMENT

AI-first, cloud-native SaaS

Role Purpose

Lead the security engineering organization that protects 6sense's AI-enabled, cloud-native SaaS platform. This leader owns Vulnerability Operations, Infrastructure Security, and Application/Product Security, and is accountable for building scalable security capabilities that enable rapid product delivery without compromising customer trust, resilience, or compliance. The role leads a distributed team across the United States and India and combines strategic leadership with credible technical judgment.

Leadership Mandate

• Build one integrated security engineering operating model across the three teams, with clear ownership, service expectations, priorities, and measurable outcomes.
• Partner with Product, Engineering, Cloud Infrastructure, Data, AI/ML, Security Operations, Privacy, GRC, and Enterprise Technology leaders to embed security into planning and delivery.
• Create an inclusive, high-accountability culture across time zones using clear decisions, durable documentation, effective handoffs, and intentional overlap for critical work.
• Balance hands-on technical engagement with people leadership, program ownership, stakeholder influence, and executive-level risk communication.

Core Responsibilities

1. Organization and People Leadership

• Lead, coach, and develop managers and engineers across the United States and India. Establish role clarity, career paths, succession coverage, and consistent performance expectations.
• Create an operating cadence that supports asynchronous execution, reliable cross-region handoffs, rapid escalation, and shared accountability.
• Build workforce and capacity plans aligned to product growth, AI investment, risk, and business priorities.
• Foster a culture of constructive challenge, disagree and commit, continuous learning, quality, and automation-first improvement.

2. AI and Product Security

• Own the security strategy for AI-enabled product capabilities from design through production, including threat modeling, architecture review, secure development standards, testing, monitoring, and release readiness.
• Address AI-specific risks such as prompt injection, insecure tool or agent access, sensitive-data exposure, model and data pipeline integrity, excessive agency, abuse, and third-party model or service dependencies.
• Partner with AI/ML, Product, and Engineering teams to define secure patterns for models, agents, retrieval-augmented generation, application programming interfaces, data access, and human approval controls.
• Advance product security practices including secure software development lifecycle controls, code and design review, application security testing, penetration testing, security champions, and coordinated vulnerability disclosure or bug bounty.

3. Vulnerability Operations

• Own end-to-end vulnerability discovery, prioritization, remediation governance, exception management, and validation across applications, cloud infrastructure, containers, endpoints, operating systems, and third-party components.
• Move beyond severity-only prioritization by incorporating exploitability, internet exposure, asset criticality, data sensitivity, available compensating controls, and active threat intelligence.
• Improve remediation speed and predictability through automation, clear service-level objectives, transparent ownership, and decision-ready reporting.
• Establish effective coverage for software supply chain risk, including open-source dependencies, build systems, artifacts, secrets, and continuous integration and delivery pipelines.

4. Infrastructure and Cloud Security

• Own preventive and detective security guardrails for the AWS environment, infrastructure as code, containers, identity and access, network boundaries, workloads, secrets, logging, and data services.
• Partner with Infrastructure and Platform Engineering to make secure cloud patterns easy to adopt and to reduce reliance on manual review.
• Drive least privilege, secure administrative access, workload identity, segmentation, configuration assurance, and continuous cloud risk reduction.
• Ensure architecture and change reviews focus on material risk while preserving engineering velocity.

5. Strategy, Governance, and Business Partnership

• Translate business strategy, product roadmaps, AI priorities, threat trends, customer commitments, and audit requirements into a multi-quarter security engineering roadmap.
• Define quarterly objectives and key results, key performance indicators, and key risk indicators that show coverage, outcomes, trends, and remaining exposure.
• Communicate risk and tradeoffs clearly to technical leaders and executives. Escalate material risks with practical options, owners, and recommended decisions.
• Maintain policies, standards, control evidence, inventories, and operating procedures that support SOC 2, ISO 27001, privacy, customer assurance, and other applicable obligations.
• Evaluate and rationalize security tools and services based on measurable risk reduction, engineer experience, coverage, integration, and total cost.

Success Measures

Success will be measured by outcomes and sustained operating health, not activity volume alone:

Material vulnerabilities and security design risks are identified early, prioritized consistently, and remediated or formally accepted within defined objectives.

Coverage

Security controls and testing provide measurable coverage across product code, AI features, cloud infrastructure, containers, identities, dependencies, and critical data paths.

Approved secure patterns, automation, and self-service controls reduce security friction and late-stage rework.

AI security readiness

AI features have repeatable security requirements, threat models, tests, release criteria, monitoring, and documented residual risk.

Operational maturity

The three teams operate with clear ownership, reliable cross-region handoffs, actionable metrics, current documentation, and effective escalation.

People and leadership

The organization demonstrates strong engagement, skill growth, succession depth, retention, and accountable delivery across locations.

Stakeholder trust

Product, Engineering, Infrastructure, and executive partners receive timely, clear, decision-ready security guidance and reporting.

Required Experience and Capabilities

• 8+ years in information security, including significant experience in product or application security, cloud security, vulnerability management, or security engineering.
• 3+ years leading security engineering teams, including experience managing distributed or cross-region teams. Experience leading managers is preferred.
• Demonstrated ability to build and mature security programs in a cloud-native SaaS environment, preferably on AWS.
• Practical experience securing modern software delivery, including secure development lifecycle practices, application security testing, cloud-native infrastructure, containers, infrastructure as code, software supply chain, and vulnerability operations.
• Working knowledge of AI and machine learning security risks and controls. Experience securing large language model, agentic, or retrieval-augmented generation features is strongly preferred.
• Ability to evaluate technical risk, make sound tradeoffs, and convert strategy into clear roadmaps, operating mechanisms, and measurable outcomes.
• Strong executive and technical communication skills, including the ability to explain complex risk in plain language and influence without relying on authority.
• Knowledge of relevant practices and frameworks such as NIST Secure Software Development Framework, OWASP, OWASP guidance for large language model applications, MITRE ATLAS, CIS Benchmarks, NIST 800-53, SOC 2, and ISO 27001.

Technical Domain Familiarity

• Application and product security: threat modeling, architecture review, static and dynamic testing, code review, penetration testing, security champions, application programming interface security, and bug bounty or coordinated disclosure.
• Cloud and infrastructure security: AWS, cloud security posture management, cloud-native application protection, identity and access management, containers, Kubernetes, infrastructure as code, secrets, operating system hardening, and logging.
• Vulnerability and supply chain security: scanners, risk-based prioritization, dependency and artifact security, software bills of materials, build pipelines, remediation governance, and exception management.
• AI security: model and data access, prompt injection, agent and tool permissions, retrieval security, output handling, data leakage prevention, red teaming, abuse monitoring, and third-party AI service risk.

Preferred Qualifications

• Bachelor's degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
• Relevant certification such as CISSP, CISM, GIAC, or an advanced cloud security certification.
• Experience in a high-growth business-to-business SaaS company and in customer-facing security assurance.

Leadership Behaviors

• Leads with clarity, trust, accountability, and sound judgment.
• Develops people and creates space for strong technical leaders to lead.
• Prioritizes based on business impact and risk, not noise or tool output.
• Communicates early, directly, and in plain language.
• Uses data to guide decisions while recognizing where judgment is required.
• Challenges constructively, commits to decisions, and follows through.
• Stays current on modern threats affecting cloud-native SaaS and AI-enabled products.

Base Salary Range: $204,721.50 - $254,258.20. The base salary range represents the anticipated low and high end of the base salary range for this position. Actual salaries may vary and may be above or below the range based on various factors, including but not limited to work location and experience. The base salary is one component of 6sense’s total compensation package for this position. Other compensation may include a bonus program or commission plan, and stock options if approved by 6sense’s board. In addition, 6sense provides a variety of benefits, including generous health insurance coverage, life, and disability insurance, a 401K employer matching program, paid holidays, self-care days, and paid time off (PTO). #Li-remote

Full-time employees can take advantage of health coverage, paid parental leave, generous paid time-off and holidays, quarterly self-care days off, and stock options. We’ll make sure you have the equipment and support you need to work and connect with your teams, at home or in one of our offices.

We have a growth mindset culture that is represented in all that we do, from onboarding through to numerous learning and development initiatives including access to our LinkedIn Learning platform. Employee well-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal growth. From wellness days to ERG-hosted events, we celebrate and energize all 6sense employees and their backgrounds.

Equal Opportunity Employer:

6sense is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [e-mail] .

We are aware of recruiting impersonation attempts that are not affiliated with 6sense in any way. A ll email communications from 6sense will originate from the @6sense.com domain . We will not initially contact you via text message and will never request payments . If you are uncertain whether you have been contacted by an official 6sense employee, reach out to jobs@ 6sense.com

Create a Job Alert

Interested in building your career at 6sense? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Website

Will you now or in the future require visa sponsorship? * Select...

You are the security leader for a cloud-native SaaS platform running in AWS. Engineering plans to launch an AI-powered feature that uses Retrieval-Augmented Generation (RAG), agentic workflows, and direct access to customer data.What are the five highest-risk security concerns you would address before production launch, and what specific controls would you require? Please complete this question using your own knowledge and experience. Do not use AI tools. *

Have you directly led security strategy, architecture reviews, threat modeling, or security controls for AI-enabled products, generative AI capabilities, LLMs (Large Language Models), AI agents, or machine learning platforms in a production environment? * Select...

Have you managed multiple security engineering functions simultaneously (for example: Application Security, Cloud/Infrastructure Security, Vulnerability Management, Product Security, Detection Engineering, or Security Architecture) across distributed global teams? * Select...

Describe your level of accountability for securing a cloud-native SaaS platform running in AWS. * Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in 6sense’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.