Manager, Security Engineering

APEX Fintech Services•Austin, TX

2d•Hybrid

About The Position

This position will be responsible for our Information Security Engineering Team personnel and functions including, but not limited to application security, cloud security, data security, DevSecOps , secure SDLC, security automation, security planning & strategy, and implementing security control s . Manager, Security Engineering requires an adaptable person, comfortable and apt at development of strategy, vision and personnel management as well as tactical problem-solving, and hands-on troubleshooting as needed. The M anager will execute and recommend strategic development and integration of security controls in application & product development and various cloud technology instances (IaaS, SaaS, PaaS, etc.) managed by Apex Fintech Solutions . You'll balance hands-on technical guidance with people management responsibilities, driving the maturation of our security capabilities to meet evolving threats in the financial services landscape. This role is also expected to be able to solve complex problems with little oversight, take ownership and work independently as needed.

Requirements

Bachelor's degree in Computer Science, Information Security, Engineering, or related field
7+ years of security engineering or cybersecurity experience
3+ years of team leadership or management experience
Demonstrated success implementing security solutions at enterprise scale
Experience working in agile development environments and DevSecOps practices
Strong understanding of security frameworks, threat modeling, and secure coding practices
Proficiency with security tools such as SIEM, vulnerability scanners, firewalls, and endpoint protection
Deep knowledge of cloud security, container security, and infrastructure security
Experience with security automation, scripting languages (Python, PowerShell), and Infrastructure-as-Code
Strong analytical skills with experience using security analytics platforms and incident response tools
Exceptional verbal and written communication skills with ability to collaborate across technical and non-technical teams
Proven ability to prioritize and manage multiple security initiatives in fast-paced environments
Strong analytical and problem-solving skills with attention to security detail
Strategic mindset with capability to navigate security challenges while delivering business value
Experience influencing stakeholders without direct authority on security matters
Strong decision-making skills with ability to balance security requirements with business needs

Nice To Haves

Performing or acting as team lead or manager with direct reports.
Experience with data security, secure coding practices and security technologies
Experience in using industry standards & regulations, such as ISO, NIST CSF, CIS Controls, SOC 2, SEC, FINRA
Skilled in managing DevSecOps, CI/CD, source control management and infrastructure-as-code such as GitHub, Bitbucket, Terraform, etc.
Experience with Microservices, Containers and Kubernetes security.
Expertise in the design, development, implementation, and maintenance of on-premises Data Center technologies and Cloud environments such as Azure, GCP, and/or AWS.
Experience with scripting and programming languages, including integration with APIs, such as Python, Perl, PowerShell, Bash, Java, JavaScript, and Go.
Familiarity with multiple security, vulnerability and threat frameworks such as OWASP, EPSS, MITRE, CVSS, Threat Modeling, etc.

Responsibilities

Build and develop a team of security engineers, providing technical guidance, mentorship, and performance management
Provide day-to-day oversight of direct report(s), offer guidance and direction where necessary, assist in issue resolution, balance competing interests, and escalate significant concerns as appropriate
Embedding security controls and technologies seamlessly into the development lifecycle of systems, applications, platforms, and products.
Develop security engineering processes, procedures and standards across the organization to promote standardized security requirements, aligning with internal policies and compliance requirements
Partner with cross-functional teams (Security Operations, GRC, IT, Engineering, Technology , Platform ) to implement security controls that protect Apex systems and data.
Participate in the software design life cycle , total cost of ownership of security technology , application security , and platform infrastructure.
Influence & instill secur e by design standards, guidelines, and technologies
Manage security engineering projects within allocated budgets and timelines while measuring success through meaningful KPIs and SLAs
Foster innovation within an agile framework while maintaining operational excellence in our security tooling and infrastructure
Create scalable security automation solutions to increase efficiency and consistency of protection capabilities.
Support security incident response activities for technical and product incidents