Senior Manager DevSecOps

SAS•Cary HQ, NC

6d•Hybrid

About The Position

The Senior Manager, DevSecOps will lead SAS's DevSecOps team and shape how security is integrated across Global Engineering and R&D. The team enables secure, reliable software delivery at scale through modern tooling, automation, security architecture, vulnerability management, and offensive security practices. The role works with engineering, product, governance, and security partners to create a strategy that makes secure practices easier for developers, reduces friction, and improves the organization's ability to identify, prioritize, and address risk. The successful candidate translates security objectives into measurable engineering outcomes, builds and develops a high-performing team, establishes scalable security capabilities, and influences engineering practices across a large, distributed organization. Success includes reducing risk and creating transparent, automated, sustainable security practices that development teams widely adopt and embed into the software delivery lifecycle.

Requirements

At least 10 years of related programming or security experience, including three years of project lead, supervisory, or management experience.
Bachelor's degree with a major in Computer Science, Electrical Engineering, or a related field; an equivalent combination of related education, training, and experience may be considered.
Extensive hands-on experience in product security, application security, or software security engineering, with a track record of meaningful impact.
Deep technical understanding of modern software architectures, cloud platforms, and enterprise SaaS deployment models, sufficient to evaluate security findings in architectural context.
Proven experience in threat intelligence, CVE management, and security incident response, including hands-on involvement in active incidents.
Exceptional communication skills, including briefing executives and providing precise guidance to engineers.
Experience influencing stakeholders outside the candidate's team and business unit.
Accountability for software lifecycle, customer-impacting issues, and continuous improvement.

Nice To Haves

Relevant security certifications such as GIAC certifications, CEH, CCSP, CSSLP, CISM, or CISSP.
Background in penetration testing leadership, offensive security, or red team operations.
Experience with supply chain security, SBOM, and third-party risk management.
Expertise in securing enterprise web applications and familiarity with OWASP Top 10, CVSS, CWE, and SANS-25.
Familiarity with security governance frameworks and ISMS participation.
Recognized thought leadership in the security community, such as publications, conference contributions, or open-source work.
Architectural fluency, including building an understanding of systems being secured and investigating findings in sufficient depth before making judgments.

Responsibilities

Lead and mentor a talented and diverse team of engineers and security professionals.
Advocate for best practices and continuous improvement across the team, department, and engineering organization.
Monitor the external threat environment, including CVEs, industry incidents, emerging attack patterns, and regulatory shifts, and proactively brief engineering leadership on relevant developments.
Help design and deliver a modern, automated security platform for assessing risks, managing vulnerabilities, and assisting with remediation while reducing toil for engineering teams.
Establish practices and enablement to ensure applicable security policies and processes are followed in support of secure software development goals.
Build a model for iterative, continuous improvement in security practice maturity and posture.
Build partnerships with security leaders and stakeholders across the company to respond to incidents and risks, and lead a unified approach to security solutions.
Drive alignment on security priorities across large, distributed engineering organizations.
Set direction for experts, evaluate their work, and help practitioners become more effective.

Benefits

Comprehensive medical, prescription, dental, and vision plans.
PPO medical plan option with a low annual deductible and copays.
HDHP medical plan option combined with a health savings account and an employer contribution.
Free onsite health care center for employees and family members enrolled in the PPO plan.
Onsite pharmacy with prescriptions shipped at no additional charge.
Industry-leading 401(k) plan.
Tuition Assistance Program and development programs and resources.
Vacation time and paid holidays, including a U.S. Winter Wellness Break between December 25 and January 1.
Volunteer Time Off.
Parental leave.
Unlimited paid sick days.
Childcare benefits for full-time employees.