Technical Program Manager

Aquent; San Francisco (CA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Aquent is partnering with an innovative autonomous mobility technology company to hire a Technical Program Manager, Product Security in Foster City, CA. This hybrid role leads cross-functional cybersecurity initiatives across software, cloud services, and embedded systems, translating findings into remediation plans and roadmaps.

You'll coordinate with engineering and security teams, manage milestones, and communicate risk and progress to leadership.

Qualifications

• Bachelor's or master's degree in Computer Science, Engineering, or related field, or equivalent experience.
• 6+ years in engineering, TPM, or management consulting leading cross-functional programs.
• Strong cybersecurity knowledge with direct or close partnership with security teams.
• Experience coordinating remediation across multiple engineering teams and software stacks.

Responsibilities

• Lead cross-functional cybersecurity programs focused on vulnerability management and product security.
• Partner with software engineering and security teams to identify, prioritize, track, and remediate vulnerabilities.
• Develop remediation plans, milestones, and roadmaps; monitor progress and drive resolution.
• Coordinate remediation across internally developed software, open-source components, and third-party apps.
• Interpret findings from code scanning tools, pen tests, red teaming, and other assessments.
• Translate security priorities into actionable project schedules and measurable outcomes.
• Collaborate with teams supporting software, embedded systems, and cloud services.
• Identify risks and dependencies; escalate issues and drive solutions.
• Improve processes, workflows, and tools for vulnerability tracking and program execution.
• Communicate risks and progress to stakeholders with clear reports.

Skills

Cybersecurity

Program management

Cross-functional leadership

DevSecOps

Vulnerability management

Communication

Cloud security

Education

Bachelor's degree in CS/Engineering

Master's degree preferred

Tools

SonarQube

Security assessment tools

Job description

Technical Program Manager, Product Security

Location: Foster City, CA (Hybrid, 3 days onsite per week)

Job Type: Long-term W2 Contract

Contract Duration: January 5, 2027 – January 7, 2028, with potential for extension

Aquent is partnering with an innovative company at the forefront of autonomous mobility technology to find an experienced Technical Program Manager, Product Security. This organization is developing next-generation transportation technology, bringing together advanced software, hardware, and connected systems.

We're looking for a technical program manager with a strong cybersecurity background to help drive software vulnerability management and remediation efforts across multiple engineering teams. This is an opportunity to work on complex, security-critical technology while partnering with software engineers, cybersecurity specialists, and technical leadership.

About the Opportunity

In this role, you'll lead cross-functional cybersecurity initiatives focused on identifying, prioritizing, and resolving security vulnerabilities across internally developed software, open-source components, third-party applications, and cloud services.

You'll work closely with software development and product security teams to translate security findings into actionable remediation plans, establish milestones, manage dependencies, and drive vulnerabilities through resolution.

The ideal candidate has experience managing technical programs involving cybersecurity, application security, DevSecOps, or vulnerability management. Automotive cybersecurity experience is a plus, but not required. Candidates from cloud technology, consumer electronics, aviation, telecommunications, and other software-intensive industries are encouraged to apply.

What You'll Do

• Lead cross-functional programs focused on software vulnerability management, product security, and cybersecurity risk reduction.
• Partner with software engineering and cybersecurity teams to identify, prioritize, track, and remediate security vulnerabilities.
• Develop vulnerability remediation plans, establish milestones, monitor progress, and drive resolution across multiple engineering teams.
• Coordinate remediation efforts involving internally developed software, open-source components, and third-party applications.
• Work with security teams to interpret findings from code scanning tools, penetration testing, red teaming, and other security assessments.
• Translate technical security priorities into actionable project schedules, roadmaps, deliverables, and measurable outcomes.
• Collaborate with engineering teams supporting software applications, embedded systems, connected technologies, and cloud-based services.
• Identify risks, dependencies, and bottlenecks, proactively escalating issues and facilitating solutions.
• Develop and improve processes, workflows, and tools to strengthen vulnerability tracking and security program execution.
• Communicate cybersecurity risks, remediation progress, and program status through clear reports, presentations, and stakeholder updates.

What You'll Bring

• Bachelor's or master's degree in Computer Science, Engineering, or a related technical field, or equivalent professional experience.
• 6+ years of experience in engineering, technical program management, or management consulting, including leadership of complex, cross-functional programs.
• Strong cybersecurity knowledge and experience working directly on security initiatives or closely partnering with cybersecurity teams.
• Experience collaborating with software development teams and understanding software vulnerabilities, security risks, and remediation processes.
• Familiarity with application security, secure software development, vulnerability management, and cybersecurity risk assessments.
• Ability to understand technical security findings and coordinate remediation efforts across multiple engineering teams.
• Proven ability to manage complex projects, competing priorities, technical dependencies, and cross-functional stakeholders.
• Excellent communication, analytical, and organizational skills, with the ability to explain technical concepts to both engineering teams and leadership.
• Demonstrated ability to influence teams, build relationships, and drive execution without direct authority.

Nice-to-Have Qualifications

• Previous experience as a software developer, security engineer, or DevSecOps professional who transitioned into technical program management.
• Experience leading DevSecOps, application security, product security, or cloud security initiatives.
• Familiarity with code scanning and security assessment tools such as SonarQube or similar platforms.
• Understanding of penetration testing, red teaming, and vulnerability remediation workflows.
• Experience supporting cybersecurity initiatives in AWS, Google Cloud, or other cloud environments.
• Cybersecurity experience in automotive, aviation, consumer electronics, telecommunications, rail, or other complex technical industries.
• Familiarity with automotive cybersecurity standards such as ISO/SAE 21434 or UNECE WP.29.
• Understanding of embedded systems, connected vehicles, or automotive communication protocols such as CAN, Ethernet, and V2X.