Security Engineering Manager

Redwood Trust Inc•Englewood, CO

11h•$180,000 - $200,000

About The Position

The Security Engineering Manager leads cybersecurity design, implementation, and maintenance aligned with business initiatives. This working leader manages a small team of security engineers while remaining directly involved in architecture, security tooling, and incident handling. The role builds and operates controls that protect Redwood Trust’s technology and digital assets, serves as an escalation point for security operations, threat remediation, and incident response, and helps shape the company’s developing security program. The manager partners with infrastructure, platform engineering, application development, data, and database teams, as well as internal audit, legal, and enterprise risk. They identify and implement cost-effective security solutions and communicate technical risk in business-relevant terms. The position also oversees security vendors and a portion of the security budget, supports regulatory obligations including SOX IT general controls, and participates in an after-hours incident-response on-call rotation.

Requirements

Eight or more years of experience in security engineering or security operations, including at least two years leading engineers as a manager or technical lead.
Expertise in incident response, security operations, SIEM management, and security policy creation.
Depth in Azure cloud security, including identity and access management, network controls, and native security tooling.
Practical knowledge of enterprise-scale vulnerability and patch management, and ability to drive accountability across teams outside direct reporting lines.
Experience analyzing and documenting cybersecurity solutions and mapping them to business requirements.
Familiarity with NIST and CIS frameworks and experience supporting audits or regulatory examinations.
Scripting and automation ability in PowerShell, Python, or similar, and enough CI/CD and infrastructure-as-code fluency to review the team’s work.
Working knowledge of IAM, SIEM, firewalls and proxies, encryption, IDS and IPS, MFA, MDM, Windows Server and Linux, networking, and virtualization.
Ability to set and change priorities among multiple competing constituencies.
Strong written and verbal communication skills, including ability to explain risk and tradeoffs to non-technical stakeholders.

Nice To Haves

Bachelor’s degree related to Computer Science, Business, or Information Systems, or equivalent experience.
CISSP, CISM, CCSP, GIAC, or Azure security specialty certifications.
Experience in financial services, mortgage, or another regulated industry.
Experience with Fortinet, SASE, or zero trust network access deployments.
Exposure to securing AI and machine learning workloads.
Experience standing up or maturing a security program rather than operating an established one.

Responsibilities

Lead, hire, and develop a team of security engineers, setting technical standards and clear expectations.
Lead cybersecurity engineering initiatives, implement designs for operational needs, and continuously assess systems, networks, and data to determine necessary defenses.
Own the design and operation of security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on Microsoft Entra ID, Defender, Sentinel, Purview, and Intune.
Own Identity and Access Management architecture and standards, including provisioning and deprovisioning, periodic access reviews, and related reporting.
Run vulnerability management and patching end to end, including scanning, testing, remediation, and negotiating ownership and service levels with infrastructure, application, and database teams.
Mature detection engineering and incident response, lead investigations into breaches or intrusions, and manage the operational relationship with the managed security service provider.
Create and maintain security policies, standards, and procedures aligned with the NIST Cybersecurity Framework.
Embed security into delivery through pipeline controls, infrastructure-as-code guardrails, secrets management, and secure configuration baselines.
Support regulatory and control obligations, including SOX IT general controls.
Develop executive reporting on key security technologies, including KPIs and KRIs, for the CTO, executive leadership, and board.
Manage outsourced security vendors, tooling evaluations, renewals, and a portion of the security budget, including decisions to consolidate overlapping coverage.
Participate in the after-hours on-call rotation for incident response.
Perform other duties as assigned.