Security Engineering Manager

Taskrabbit•San Francisco, CA

1d•$155,000 - $207,000•Hybrid

About The Position

Taskrabbit is a marketplace platform that conveniently connects people with Taskers to handle everyday home to-do’s, such as furniture assembly, handyman work, moving help, and much more. At Taskrabbit, we want to transform lives one task at a time. As a company we celebrate innovation, inclusion and hard work. Our culture is collaborative, pragmatic, and fast-paced. We’re looking for talented, entrepreneurially minded and data-driven people who also have a passion for helping people do what they love. Together with IKEA, we’re creating more opportunities for people to earn a consistent, meaningful income on their own terms by building lasting relationships with clients in communities around the world. Taskrabbit is a hybrid company with employees distributed across the US and EU and a Built In — Best Places to Work (2022, 2023, 2024, 2025) continually ranked across multiple national and regional categories. Join us at Taskrabbit, where your work will be meaningful, your ideas valued, and your potential unleashed! This role operates on a hybrid schedule requiring two days of in-office collaboration per week. Reporting to the Infrastructure Director of Engineering, you are a pragmatic security leader who acts as a business enabler rather than a gatekeeper. You thrive in a high-velocity, non-regulated environment where you must define "what good looks like" from scratch and drive security progress with a blend of strong planning skills and strong cross-functional partnerships. You are a technical player-coach who manages the "how" behind engineering initiatives, providing direct guidance to a lean team which needs to navigate trade-offs between quality, depth, and delivery volume. You are just as comfortable planning core initiatives as you are writing a proposal for security program improvements. You have a proven track record of leading a team to achieve compliance with a security framework from scratch (e.g., CIS, SOC2, PCI-DSS, ISO27001). Above all, you are a data-oriented communicator who uses relationship building to hold our security bar to a high standard for our customers and partners.

Requirements

5+ years of experience building and managing security teams in an agile, high-growth environment.
Proven track record of achieving a security framework from scratch (e.g., taking a company through its first SOC2 or ISO 27001 certification).
Strong technical "Player-Coach" ability, with the comfort level to dive into technical initiatives and provide direct guidance to security engineers.
Exceptional written and verbal communication skills, with a knack for telling the "story" of security through formal proposals, strategies, and risk presentations.
Pragmatic Risk Management: Ability to handle moderate risk tolerance by focusing on business impact and customer trust rather than theoretical perfection.
Analytical and data-oriented mindset, with experience designing metrics and KPIs that demonstrate the business value of security initiatives.
Expertise in influence-based leadership, showing a history of driving security maturity in non-regulated industries through relationship building and alignment.
Deep knowledge of modern security practices, including cloud security, access controls, and secure software development, with experience leading incident response.
Extensive experience working with one or more security frameworks (e.g. CIS, SOC2) and regulatory compliance standards (e.g. GDPR).
Experience with security governance for AI/ML systems and a proactive approach to managing the risks inherent in emerging technologies.
Experience with security tooling implementation: Direct experience implementing or leading the implementation of comprehensive security tooling

Responsibilities

Lead and develop a team of security engineers, acting as a technical player-coach to manage deliverables, mentorship, and continuous learning. Lead the team through prioritization and tradeoffs to determine which initiatives provide the most meaningful impact.
Integrate foundational security tooling and automation across corporate, infrastructure, and application layers. Working closely with engineering teams, IT, legal and compliance.
Develop data-driven security strategies, including OKRs, KPIs, and roadmaps, using clear written communication to advocate for security priorities during cross-functional planning.
Manage compliance with security frameworks (e.g. CIS, SOC2, GDPR), designing sustainable controls in partnership with internal teams.
Lead pragmatic incident response efforts, focusing on investigation and resolution while continuously maturing our response plans and threat modeling.
Develop and implement security strategies for AI and machine learning integrations, ensuring safe adoption while mitigating associated risks.
Drive cultural change through education, acting as a security evangelist to help cross-functional partners understand risk and own security within their respective domains.
Govern the Information Security Program, developing high-quality proposals and recommendations that align security decisions with Taskrabbit’s innovative business goals.