Manager, Security Engineering

The Trade Desk•Los Angeles, CA

11h•$124,900 - $228,900

About The Position

The Trade Desk is a global technology company and the world’s leading independent platform for digital advertising. The security of our platform is paramount to our customers' data, partner trust, and engineering velocity. As our security posture matures, we are seeking a leader to drive this forward. This role will lead a combined team of Application Security and Platform Security engineers, with end-to-end ownership of securing both the code we ship and the infrastructure we run it on. The leader will contribute to the strategy, roadmap, and execution of the Security Engineering function, including KPIs, maturity models, and executive reporting. The ideal candidate possesses deep application and platform security expertise, a proven ability to build and develop high-performing teams, a strong bias for action, and the skill to translate technical risk into business outcomes. Beyond technical skills, this leader should exhibit integrity, clear communication, empathy, curiosity, a bias for action, ownership, calmness under pressure, and humility in receiving and giving feedback. Security is a team sport, and this leader will set that tone.

Requirements

7+ years of experience in Information Security or Cybersecurity, with hands-on depth in Application Security and/or Platform/Cloud Security.
2+ years of experience leading and developing security engineering teams, including hiring, mentoring, performance management, and roadmap ownership.
Experience driving a measurable security maturity program — defining KPIs, reporting to leadership, and demonstrating posture improvement over time.
Experience building programs that apply industry-standard security best practices and reconcile them against business and engineering needs.
Experience managing a security assessment program — including architecture reviews, secure design reviews, threat models, and code/configuration reviews across many product teams.
Experience building security visibility and engagement programs (e.g., Security Champions, security awareness, training) that scale culture and coverage across the organization.
Working knowledge of cloud security, Cloud Security Posture Management (CSPM), and Infrastructure-as-Code scanning across one or more major cloud platforms (AWS, GCP, or Azure).
Strong understanding of secure software development and deployment practices, including common application security risks and mitigations (e.g., OWASP, CWE).
Familiarity with common Information Security frameworks and standards such as MITRE ATT&CK, NIST, and ISO 27001/27002.
Excellent written and verbal communication skills — able to translate technical risk into business outcomes for executive audiences and to communicate, influence, and manage expectations directly with engineering teams.

Nice To Haves

Certifications such as CISSP, CSSLP, GWAPT, OSWE, or cloud security certifications (AWS, GCP, or Azure) are a plus.
Knowledge of PII, PHI, financial data regulations, data residency requirements, and international regulatory aspects pertaining to sensitive information is a plus.
Experience in ad tech, large-scale SaaS, or other high-throughput consumer/enterprise platforms is a plus.

Responsibilities

Lead, grow, mentor, and develop a combined team of Application Security and Platform Security engineers; drive performance, growth, and retention across the function.
Own and evolve The Trade Desk’s Security Engineering strategy, roadmap, and maturity model across both application and platform domains; define and report KPIs that demonstrate measurable improvement in security posture to senior leadership.
Ensure consistency and alignment across application and platform security controls — driving unified standards, shared tooling, and integrated posture outcomes for the enterprise.
Drive shift-left integration of security into the SDLC in partnership with Engineering and Product — including threat modeling, secure design reviews, and the rollout and tuning of SAST, DAST, and SCA tooling.
Mature TTD’s posture management capabilities across cloud and infrastructure — including CSPM, Infrastructure-as-Code scanning, hardening baselines, and configuration management.
Mature TTD’s vulnerability management and remediation orchestration practices — including triage workflows, risk-based prioritization, SLA tracking, and integration with engineering workflows.
Represent the Security Engineering function across the broader organization — Engineering, Product, Compliance, Security Response, and executive leadership — and influence roadmap decisions, resource allocation, and security investment priorities.

Benefits

Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents
Retirement benefits such as a 401k plan and company match
Short and long-term disability coverage
Basic life insurance
Well-being benefits
Reimbursement for certain tuition expenses
Parental leave
Sick time of 1 hour per 30 hours worked
Vacation time for full-time employees up to 120 hours thru the first year and 160 hours thereafter
Around 13 paid holidays per year
Employees can also purchase The Trade Desk stock at a discount through The Trade Desk’s Employee Stock Purchase Plan.