Product Security Manager

About the Role

The day-to-day entails overseeing the operations of the Application Security and Vulnerability Management & Automation teams, defining the roadmap for product security with a focus on scalable automation, and driving the end-to-end lifecycle of vulnerability discovery, triaging, and remediation. Collaboration is key, as this role requires working closely with Engineering and Product leaders to prioritize security debt and promote a culture of Security by Design.

In this context, the Product Security Manager is not just a technical expert but also a leader and strategist who can influence different parts of the business with security initiatives. The ability to negotiate the best security solutions for new challenges and unexplored territories is essential, given the fast-paced and innovative nature of MoonPay's work.

What You Will Do

• Lead and mentor the Application Security and Vulnerability Management & Automation teams.
• Define the roadmap for product security, focusing on scalable automation and proactive defense mechanisms.
• Drive the end-to-end lifecycle of vulnerability discovery, triaging, and remediation across the entire ecosystem.
• Improve security tooling (SAST, DAST, SCA) into CI/CD pipelines.
• Lead threat modeling sessions and penetration testing for new features.
• Partner with Engineering and Product leaders to prioritize security debt and promote a culture of Security by Design.
• Lead high-priority security incidents and investigations and improve processes.
• Manage team rotas and escalations.
• Collaborate with cross-functional teams to ensure security is integrated into all aspects of product development.

What We Are Looking For

• Proven experience in product security, with a focus on scalable automation and proactive defense mechanisms.
• Strong leadership skills, with the ability to mentor and lead high-impact teams.
• Experience with security tooling (SAST, DAST, SCA) and CI/CD pipelines.
• Strong understanding of vulnerability management and remediation processes.
• Ability to work closely with cross-functional teams, including Engineering and Product.
• Excellent communication and negotiation skills.
• Experience with threat modeling and penetration testing.
• Familiarity with compliance and regulatory requirements in the digital payments space.

Nice to Have

• Experience with blockchain technology and crypto payments.
• Knowledge of cloud security and infrastructure security.
• Certification in security (e.g., CISSP, CEH).
• Experience with machine learning and AI in security contexts.

Benefits and Perks

• Competitive compensation package.
• Opportunity to work with a leading company in the digital payments space.
• Remote work arrangement, allowing for flexibility and work-life balance.
• Professional development opportunities, including training and education support.
• Access to cutting-edge technologies and tools.
• Collaborative and dynamic work environment.
• Health and wellness benefits, including mental health support.
• Generous PTO policy, recognizing the importance of rest and relaxation.

• Tip: Showcase your experience with security tooling and vulnerability management in your application, as these are key areas of focus for the Product Security Manager role.
• To stand out, highlight any certifications in security (e.g., CISSP, CEH) and experience working with cross-functional teams.
• When preparing for interviews, review common security frameworks and be ready to discuss your approach to security strategy and implementation.
• Consider including examples of how you've handled high-priority security incidents in the past, demonstrating your crisis management skills.
• Be prepared to discuss your experience with scalable automation and proactive defense mechanisms, and how you see these evolving in the future of product security.
• Tip: Ask about MoonPay's approach to security by design and how the company prioritizes security debt during the interview, showing your interest in the company's security culture.