Senior Manager, Security Engineering

About the Role

The Security Engineering team at Fullstory is committed to establishing a 'paved road' for engineers to securely design, build, test, and maintain software and cloud infrastructure. This team considers leading with empathy and providing excellent customer service to stakeholders paramount to success. The Senior Manager, Security Engineering will report into the Director, Cloud Platform, and will play a key role in shaping the company's security strategy and direction.

As a leader in the security engineering team, this role will be responsible for driving the ongoing build-out of a holistic security engineering program at Fullstory. This will involve working closely with engineers, product teams, and other stakeholders to identify and mitigate security risks, develop and implement secure development practices, and ensure compliance with relevant regulations and standards.

What You Will Do

• Lead a team of application and cloud security engineers, including strategy and mentorship
• Develop and implement security initiatives and programs to protect Fullstory's products and services
• Collaborate with cross-functional teams, including engineering, product, and legal, to ensure security and compliance
• Establish and maintain relationships with security vendors and partners
• Develop and manage budgets for security programs and initiatives
• Stay up-to-date with emerging security threats and trends, and develop strategies to mitigate them
• Participate in incident response investigations and collaborate with legal and external security firms
• Advise peer leaders on cross-business initiatives and product strategy on security and risk
• Develop and maintain security policies, procedures, and standards
• Ensure compliance with relevant regulations and standards, such as SOC 2 and GDPR

What We Are Looking For

• Full-time people leadership experience in a similar type of team
• Experience owning, planning, and executing business-level security initiatives
• Experience building sustainable security programs with an emphasis on customer service, partnership, and enablement of software engineering and business stakeholders
• Experience participating in security architecture, risk management, vendor diligence, threat analysis, and other dimensions of technical expertise to support team initiatives
• Experience directly managing security vendor relationships, project scoping, deployment, etc.
• Strong technical background in security, with experience in cloud security, secure development practices, and threat analysis
• Excellent leadership and communication skills, with the ability to communicate complex security concepts to both technical and non-technical stakeholders
• Experience with security frameworks and regulations, such as NIST, ISO 27001, and SOC 2
• Experience with cloud security platforms, such as AWS or Azure

Nice to Have

• Experience with security orchestration, automation, and response (SOAR) tools
• Experience with cloud security gateways and firewalls
• Experience with identity and access management (IAM) systems
• Experience with security information and event management (SIEM) systems
• Certification in security, such as CISSP, CISM, or CEH

Benefits and Perks

• Competitive salary and bonus structure
• Comprehensive health, dental, and vision insurance
• 401(k) matching program
• Flexible paid time off and holidays
• Remote work stipend and equipment budget
• Professional development opportunities, including training and conference attendance
• Access to cutting-edge security tools and technologies
• Collaborative and dynamic work environment with a team of experienced security professionals

• Tip: Highlight your experience with cloud security, secure development practices, and threat analysis in your resume and cover letter.
• To stand out, showcase your ability to communicate complex security concepts to non-technical stakeholders.
• Prepare to discuss your experience with security frameworks and regulations, such as NIST, ISO 27001, and SOC 2.
• Be ready to provide examples of your leadership experience, including team management and mentorship.
• Research Fullstory's products and services, and be prepared to discuss how you can contribute to the company's security strategy and direction.
• Consider obtaining security certifications, such as CISSP, CISM, or CEH, to demonstrate your expertise and commitment to the field.
• When negotiating salary, be sure to discuss the company's bonus structure and benefits package, in addition to the base salary.