Senior Engineering Manager, Security (DevSecOps)

Why This Role is Exciting:

The Senior Security Engineering Manager provides tactical and technical leadership to a skilled and motivated team of security engineers, tasked with protecting AuditBoard and its customers. Using modern and cloud-centric technologies and techniques, the security team is responsible for product/application security, cloud / Kubernetes infrastructure engineering and hardening as well as incident detection and response. AuditBoard was founded by Audit, Risk and Compliance practitioners, so security is built right into our DNA. This leadership role is a unique opportunity to partner with highly engaged leadership across the organization to build and maintain secure products and services for a security-conscious customer base. 

Key Responsibilities:

• Understanding customer needs and expectations for SaaS security, and cultivating customer trust in our world-class security, compliance, and privacy programs.
• Collaborating with technology leaders to guide the design and creation of resilient products and infrastructure while collaborating on critical technology decisions.
• Developing and overseeing the operation of vulnerability detection and remediation capabilities that ensure secure product development and delivery. 
• Fostering threat landscape awareness, and establishing capabilities and procedures to detect, respond, and recover from cyber intrusions, or other security-impacting incidents. 

Attributes for a Successful Candidate:

• Technical Leadership - Willingness to get hands-on keyboard, in the code with the team to provide ground-level direction and feedback. Hands-on experience engineering across Information Security Domains is preferred:
• Infrastructure Security: Hands on experience engineering in Cloud Services (AWS, Azure), Kubernetes, Terraform, Packer, Vault, Sentinel, Kynerno, CICD Security, Vulnerability Management, CSPM 
• Secure Software Development: Threat Modeling, SCA, SAST, DAST, Bug Bounty, Pen Testing
• Detection and Response: WAF, IDS, Anti-Virus, Log Management, SEIM, EDR, Security Data Lakes, Incident Management
• People Leadership - Interest or aptitude in mentoring and skills development
• Regulatory Experience - Familiarity or experience working in regulated environments, such as SOC2, HIPAA or similar.