Our client, a global tech unicorn is looking for an ambitious Security Engineering Manager who will take a holistic approach to safeguard our engineering assets serving millions of users worldwide. They have built in-house products and systems from scratch which requires robust security measures to protect user data, intellectual property, and sensitive corporate information.
You would be working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities and the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but would also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.
Requirements
- Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
- Strong background in leading cybersecurity or software development projects using agile methodologies.
- Experience securing applications in fast-paced environments with frequent changes.
- Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
- Hands-on experience with cloud platforms like AWS and GCP, including platform-specific security features and common security tools.
- Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
- Deep technical knowledge of web, mobile, OS, and network security
- Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
- Excellent verbal and written communication skills.
- Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
- Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
- Experience in CTF, bug bounty programs, and presenting at security conferences, or publications is a plus.
- Experience with penetration testing, red teaming, or purple teaming is a plus.
- Web development experience or developing security tools is a plus.
- Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus
