Technical Program Manager, Security

United States Digital Space LLC; Oakland (CA); Hybrid; USD 180,000 - 235,000; Full time

Job summary

dbt Labs is seeking a high-performance, hands-on technical program manager (TPM) in the security domain to lead security initiatives across the organization from our Oakland, CA base. You will bridge engineering and business stakeholders while coordinating vulnerability management across infrastructure, code, and dependencies.

The role requires strong experience in security engineering, cloud security, and program management, with a focus on proactive risk reduction across AWS, GCP, and Azure

Qualifications

• Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security.
• Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives.

Responsibilities

• Execute the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities.
• Collaborate with Security and Engineering teams to identify, prioritize, and patch vulnerabilities; provide oversight for timely remediation.
• Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution.
• Utilize AI to define the roadmap for proactive security based on risk assessments.
• Lead dependency management and image hardening programs to improve security posture.
• Establish and lead a code scanning program with multiple teams to ensure secure development practices.
• Dedicate up to 20% of time to assess business systems for vulnerabilities and compliance gaps; develop scanning plans and standards.
• Advocate for shift-left security by integrating security/testing early in the development lifecycle.

Skills

Security engineering

Vulnerability management

Cloud security

Program management

Cross-functional collaboration

Tools

Terraform

Docker

Kubernetes

Job description

From the company’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With the company, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven.

About Us

the company and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data.

Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on.

the company helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions.

As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact.During this transition period, you may see references to both the company and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites.

About the Role

the company is building data pipelines to power the modern data stack for thousands of companies.

We’re looking for a high-performance, experienced hands-on technical program manager(TPM) in the security domain to be part of an Engineering team. In this role, you will be responsible for leading and managing security-related initiatives across the organization. It involves collaborating with cross-functional teams to ensure the successful planning, execution, and delivery of security programs. The TPM will act as a bridge between technical teams and business stakeholders, ensuring alignment with organizational goals while mitigating security risks.

The work is very diverse. the company is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools, implement improvements within our environments, and assist in developing new processes to increase our security posture.

This is a full-time position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team.

Technologies You’ll Use

Bash, Python, JS, BigQuery, Looker, Sigma, Azure, AWS, GCP, Terraform, Docker, Kubernetes, Github, Buildkite, SonarQube, Grafana, Prisma, Synk, Signal Sciences, AI Tools

What You’ll Do

• This is the primary person in engineering responsible for executing the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities.

• Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched. Provide technical oversight and accountability to ensure the effective delivery of security fixes.

• Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution.

• Usage of AI in defining the roadmap for a proactive security approach based on risk assessment/rating

• Running the Dependency management and image hardening programs

• Using AI to contribute to the remediation of code and infrastructure vulnerabilities

• Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices.

• Dedicate up to 20% of the time to assessing business systems to identify vulnerabilities and compliance gaps proactively. Develop a scanning and detection plan and establish policies and standards for internal data access tools to improve overall system security.

• Advocate for tools and solutions that support shift-left strategies, driving early integration of security and testing in the development lifecycle.

Skills We’re Looking For

• Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security.

• Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives.