Security Engineering Manager

Redwood Trust•Englewood, CO

About The Position

The Security Engineering Manager leads cybersecurity design, implementation, and maintenance aligned with business initiatives. This working leadership role develops a small team of engineers while remaining directly involved in architecture, security tooling, and incident handling. The position helps build Redwood’s security program, shaping security standards, detection and response operations, managed security provider relationships, and scalable engineering practices. The manager partners with technology, audit, legal, and enterprise risk teams, translating technical risk into actionable business terms. The role owns security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on Microsoft security technologies. It also owns IAM architecture and standards, vulnerability management, detection engineering, incident response, and security policies aligned to the NIST Cybersecurity Framework. The manager embeds security into software and infrastructure delivery, supports SOX IT controls and other obligations, develops executive and board reporting, and manages security vendors, tools, and part of the security budget. The position participates in an after-hours incident response on-call rotation. Redwood Trust is a specialty finance company investing in mortgage-related assets and engaging in residential and commercial mortgage banking. It describes its workplace as non-hierarchical, hard-working, and fun, and says it values employee contributions and feedback.

Requirements

Bachelor’s degree related to Computer Science, Business, or Information Systems preferred, or equivalent experience.
Eight or more years in security engineering or security operations, including at least two years leading engineers as a manager or technical lead.
Expertise in incident response, security operations, SIEM management, and security policy creation.
Depth in Azure cloud security, including identity and access management, network controls, and native security tooling.
Practical knowledge of enterprise-scale vulnerability and patch management, with the ability to drive accountability across teams outside direct reporting lines.
Experience analyzing and documenting cybersecurity solutions and mapping them to business requirements.
Familiarity with NIST and CIS frameworks and experience supporting audits or regulatory examinations.
Scripting and automation ability in PowerShell, Python, or similar, and sufficient CI/CD and infrastructure-as-code fluency to review team work.
Working knowledge across IAM, SIEM, firewalls and proxies, encryption, IDS and IPS, MFA, MDM, Windows Server and Linux, networking, and virtualization.
Ability to set and change priorities among multiple competing constituencies.
Strong written and verbal communication, including the ability to explain risk and tradeoffs to non-technical stakeholders.

Nice To Haves

CISSP, CISM, CCSP, GIAC, or Azure security specialty certifications.
Experience in financial services, mortgage, or another regulated industry.
Experience with Fortinet, SASE, or zero trust network access deployments.
Exposure to securing AI and machine learning workloads.
Experience standing up or maturing a security program rather than operating an established one.

Responsibilities

Lead, hire, and develop a team of security engineers, setting technical standards and clear expectations.
Lead cybersecurity engineering initiatives and implement designs that meet operational needs and environmental factors; continually assess systems, networks, and data to determine necessary defenses.
Own the design and operation of core security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on Entra ID, Defender, Sentinel, Purview, and Intune.
Own Identity and Access Management architecture and standards, including access provisioning and deprovisioning, periodic access reviews, and related reporting.
Manage vulnerability management and patching end to end, including scanning, testing, remediation, and negotiating ownership and service levels with infrastructure, application, and database teams.
Mature detection engineering and incident response, lead investigations into breaches or intrusions, and manage the operational relationship with the managed security service provider.
Create and maintain security policies, standards, and procedures aligned to the NIST Cybersecurity Framework, keeping them current as the environment changes.
Embed security into delivery through pipeline controls, infrastructure-as-code guardrails, secrets management, and secure configuration baselines.
Support regulatory and control obligations, including SOX IT general controls.
Develop executive reporting, including Key Performance Indicators and Key Risk Indicators, for the CTO, executive leadership, and the board.
Manage outsourced security vendors, tooling evaluations, renewals, and a portion of the security budget, including decisions to consolidate overlapping coverage.
Participate in the after-hours on-call rotation for incident response.
Perform other duties as assigned.