Managing Engineer Security

### Job Description Product Security Engineering designs, builds, and operates enterprise security controls as software products that integrate directly into the SDLC and core enterprise platforms. The organization applies modern engineering practices to create scalable, reliable, and developer friendly security capabilities that are embedded into the enterprise technology ecosystem and enable secure by default behaviors while minimizing friction for product and platform teams. The Managing Security Engineer is a hands on engineering leader responsible for leading a team that delivers and operates these security controls in production. This role blends deep technical leadership, people leadership, and delivery ownership: setting technical direction, guiding architecture and design decisions, coaching and developing engineers, and ensuring the team consistently ships high quality software that achieves measurable security and engineering outcomes. The Managing Security Engineer is accountable for the end to end success of the team's security products, including reliability, adoption, and operational health in production. ### Key Responsibilities - Lead and manage an engineering team delivering security controls as software products, including hiring, onboarding, coaching, performance management, and career development. - Set technical direction for the team and drive high-quality execution across design, implementation, deployment, and production support of security controls. - Serve as a hands-on technical leader by contributing to architecture and design reviews, guiding technical decisions, performing code reviews, and supporting critical-path implementation as needed. - Own operational outcomes for the team's products in production, including reliability, performance, and continuous improvement through feedback and learning loops. - Partner with Digital Product Managers, platform teams, and engineering stakeholders to effect alignment across roadmaps, priorities, and delivery plans spanning multiple product portfolios. - Build and sustain a strong engineering culture that emphasizes modern delivery practices (e.g., test-driven development, paired programming, CI/CD), fast feedback, and continuous improvement. - Influence and innovate solutions to complex security challenges by translating security needs into scalable engineering approaches and reusable capabilities. - Facilitate effective agile execution (standups, planning, backlog refinement, retrospectives) while maintaining a strong focus on outcomes rather than ceremony. ### Essential Skills - 5+ years of professional software engineering experience, including hands on production coding in modern languages (e.g., Java, JavaScript, Python) and ownership of production systems. - 2+ years of experience leading engineers through hands on technical guidance, including architecture reviews, design decisions, and code reviews. - Proven background in building and operating scalable, distributed systems in cloud environments, including microservices-based architectures. - Track record of designing, evolving, and integrating APIs and backend services. - Practical application of modern engineering practices such as test-driven development, paired programming, CI/CD pipelines, and operational feedback loops. - Experience operating within agile delivery environments. ### Desirable Skills - Demonstrated depth in security engineering domains such as application security, cloud security, DevSecOps, or secure software development practices. - Practical experience designing or operating security controls embedded into CI/CD pipelines, developer workflows, or shared platform services. - Proven ability to influence technical decisions beyond the immediate team. - Experience mentoring senior engineers and emerging technical leaders. - Strong organizational awareness and the ability to navigate cross-team dependencies. - Exposure to cloud-native and containerized environments (e.g., Kubernetes, Docker, AWS and/or Azure). - Familiarity with security metrics and operational signals (e.g., control adoption, reliability, incident reduction). - Strong mindset of balancing delivery velocity, security rigor, and developer experience.