Manager, Product Security

Delinea•Redwood City, CA

4d•$175,000 - $200,000•Remote

About The Position

Delinea is seeking a Manager of Product Security to lead and execute its Product Security program, mature the Product Security function, and develop capabilities to secure its product offerings. The role covers multiple products and includes Application Security and Vulnerability Management. The successful candidate will partner with product development teams to make security integration a low-friction experience for developers, applying experience in SSDLC, DevSecOps, and Product or Application Security. The position reports directly to the CISO, is based in the US, and is fully remote. The manager will establish a Product Security operating model spanning people, process, and technology; lead a Product Security team; and guide architects and engineers in assessing current security architecture, setting target architectures and roadmaps, and implementing secure designs. The role also includes managing initiatives and resources, working across internal teams and with customers, and reporting on program status and effectiveness to executives, stakeholders, and auditors. Travel is minimal, under 10%.

Requirements

Bachelor’s degree in Computer Science, Information Security, Business Administration, or a related field.
8 or more years of relevant experience in Product, Application, and Cloud Security.
Up-to-date knowledge of the Product Security threat landscape and industry best practices.
Proven track record of solving complex Product and Cloud Security issues and protecting products using a risk-based approach.
Experience establishing Secure SDLC frameworks and evaluating DevSecOps programs to embed security activities in partnership with product teams.
Experience supporting recruiting, technical interview screening, and team development.
Ability to develop creative solutions that balance business and security needs.
Ability to explain and enforce security measures with a broad cross-section of personnel.
Effective executive functioning and presentation skills.
Strong leadership, communication, and interpersonal skills, including the ability to influence stakeholders at all organizational levels.
Strong analytical skills, including prioritization, managing competing demands, and meeting deadlines.

Nice To Haves

Master’s degree.
Three years of Product Security leadership experience.
Understanding of cybersecurity frameworks, risk management principles, and industry standards such as NIST, ISO 27001, CIS, GDPR, FedRAMP, and Common Criteria.
Cybersecurity certifications such as CISSP, CISM, CSSLP, CCSP, or similar.
Familiarity with Jira and Confluence.
Background in software development.

Responsibilities

Design and execute a Product Security target operating model covering people, process, and technology, incorporating agile and DevSecOps best practices.
Build and shape the Product Security team culture using effective team-building practices.
Partner with Product Development to integrate security and enable developers.
Analyze, evaluate, and improve Product Security posture at procedural and technological levels.
Lead implementation of Product and Cloud Security solutions informed by current practices and industry trends.
Provide strategic and technical leadership for Product Security services, including application security architecture reviews, threat modeling, risk-based mitigation recommendations, and vulnerability management processes and SLAs.
Lead architects and engineers in understanding current security architecture, defining target architectures and multi-year roadmaps, and executing secure designs aligned with standards, compliance requirements, and best practices.
Anticipate security threats and architecture weaknesses; support security operations with investigations of possible breaches and root-cause analysis as needed.
Gather and analyze functional requirements and lead proof-of-concept activities with business users and stakeholders.
Work with partner organizations to understand business requirements and develop security solutions that support business strategy.
Plan, schedule, and allocate resources for Product Security initiatives, ensuring delivery on time, within scope, and on budget.
Collaborate with Cybersecurity, IT, product, operations, and other teams to ensure initiatives meet regulatory, industry, and security standards.
Serve as the primary contact for Product Security inquiries and escalate issues to senior leadership and external stakeholders when needed.
Drive continuous improvement in cybersecurity processes using best practices and lessons learned.
Prepare and deliver presentations and reports to executives, stakeholders, and auditors on the Product Security program's status and effectiveness.
Participate in customer-facing calls and review customer contracts to address Product Security inquiries.
Support recruiting, technical interview screening, and team development.