Senior Manager DevSecOps

SAS•Cary HQ, NC

7d•Hybrid

About The Position

The Senior Manager, DevSecOps will lead SAS's DevSecOps team and shape how security is integrated across Global Engineering and R&D. The team enables secure, reliable software delivery at scale through modern tooling, automation, security architecture, vulnerability management, and offensive security practices. The role works across engineering, product, governance, and security partners to develop a strategy that reduces friction for developers while improving the organization's ability to identify, prioritize, and address risk. The successful candidate will translate security objectives into measurable engineering outcomes, build and develop a high-performing team, establish scalable security capabilities, and influence engineering practices across a large, distributed organization. Success includes reducing risk and creating transparent, automated, sustainable security practices that development teams widely adopt and embed into the software delivery lifecycle.

Requirements

At least 10 years of related programming or security experience, including three years of project lead, supervisory, or management experience.
Bachelor's degree with major study in Computer Science, Electrical Engineering, or a related field; an equivalent combination of related education, training, and experience may be considered.
Extensive hands-on experience in product security, application security, or software security engineering, with a track record of meaningful impact beyond process compliance.
Deep technical understanding of modern software architectures, cloud platforms, and enterprise SaaS deployment models sufficient to evaluate security findings in architectural context.
Proven experience in threat intelligence, CVE management, and security incident response, including hands-on involvement in active incidents.
Exceptional communication skills across audiences, including briefing executives and advising engineers precisely.
Experience influencing stakeholders outside the candidate's team and business unit.
Accountability for the software lifecycle, customer-impacting issues, and continuous improvement.

Nice To Haves

Relevant security certifications, such as GIAC certifications, CEH, CCSP, CSSLP, CISM, or CISSP.
Demonstrated ability to drive alignment on security priorities across large, distributed engineering organizations.
Architectural fluency, including understanding systems being secured and knowing when to investigate further before judging a security finding.
Experience setting direction for experts, evaluating their work, and improving the effectiveness of practitioners.
Background in penetration testing leadership, offensive security, or red team operations.
Experience with supply chain security, SBOM, and third-party risk management.
Expertise in securing enterprise web applications and familiarity with OWASP Top 10, CVSS, CWE, and SANS-25.
Familiarity with security governance frameworks and ISMS participation.
Recognized thought leadership in the security community, such as publications, conference contributions, or open-source work.

Responsibilities

Lead and mentor a talented and diverse team of engineers and security professionals.
Promote best practices and continuous improvement across the team, department, and engineering organization.
Monitor the external threat environment, including CVEs, industry incidents, emerging attack patterns, and regulatory shifts, and brief engineering leadership on relevant developments.
Help design and deliver a modern, automated security platform for assessing risks, managing vulnerabilities, and assisting with remediation while reducing engineering toil.
Establish practices and enablement to ensure applicable security policies and processes are followed in support of secure software development goals.
Build a model for iterative, continuous improvement in security practice maturity and posture.
Partner with security leaders and stakeholders across the company to respond to incidents and risks and lead a unified approach to security solutions.

Benefits

Comprehensive medical, prescription, dental, and vision plans.
PPO medical plan option with low annual deductible and copays.
HDHP option combined with a health savings account and a SAS contribution.
Free onsite health care center for employees and family members enrolled in the PPO plan.
Pharmacy that ships prescriptions at no additional charge.
Industry-leading 401(k) plan.
Tuition Assistance Program and programs and resources to support development.
Vacation time and a variety of paid holidays.
U.S. Winter Wellness Break between December 25 and January 1.
Volunteer Time Off.
Parental leave.
Unlimited paid sick days.
Childcare benefits for full-time employees.