Staff Technical Program Manager (Security)

LinkedIn•Mountain View, CA

4d•Hybrid

About The Position

This role will be based in Mountain View, CA. At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team. About the team: LinkedIn's members entrust us with their information every day and we take their security seriously. Our core value of putting our members first powers all the decisions we make, including how we manage and protect the data of our members and customers. Information Security at LinkedIn is dedicated to protecting and securing business-critical member data and company assets. Our core mission is to empower LinkedIn to create a secure and thriving platform for every member of the global workforce. We’re hiring a Staff Security Technical Program Manager to drive execution across our Production and Enterprise Security organization. You’ll own critical programs such as vulnerability management, lead cross-functional security initiatives, and establish the operating rhythm that keeps teams aligned on priorities, OKRs, milestones, and outcomes. You’ll bring structure to complex programs, surface risks and dependencies early, drive decisions to closure, and ensure commitments don’t fall through the cracks. You’ll provide leadership with clear, accurate program status while serving as a force multiplier for engineers by removing blockers and creating clarity without adding unnecessary process. About the role: We are seeking a Security Technical Program Manager to join LinkedIn’s centralized TPM Infra organization. In this critical role, you will build and scale a mature production and enterprise security architecture to protect our global platform, members, and organizational assets. You will serve as a key driver across security governance, operational cadences, metrics telemetry, cross-functional program execution, and executive accountability for production and enterprise risk reduction.

Requirements

Bachelor's degree in Computer Science, Engineering, Information Systems, Business, Finance, or a related field.
7+ years of experience in technical program management, including a minimum of 3 years leading complex security initiatives.
Demonstrated track record of orchestrating company-wide vulnerability management lifecycles, driving cross-functional remediation, establishing governance SLAs, and reporting posture metrics to leadership.
Technical expertise to engage effectively with engineering teams, evaluate security risk factors, and navigate fundamental information protection principles across complex domains.
Technical depth to engage effectively with security engineers, assess threat severity, evaluate exploitability, and critically review risk determinations.
Extensive experience managing agile operating rhythms, OKR tracking, task management platforms (such as Jira or Linear), documentation repositories, and executive reporting dashboards.
Exceptional written communication skills with an emphasis on clarity, brevity, and structured documentation.
Proven ability to partner effectively across engineering, IT, Legal, HR, and Compliance teams to achieve business alignment and deliver organizational results.
Collaborative mindset with high emotional intelligence and an inclusive approach to problem-solving across diverse organizations.

Nice To Haves

BS and 8+ years of relevant work experience
Demonstrated history of partnering with engineering organizations to deliver high-impact, enterprise-scale security initiatives.
Outstanding written and verbal communication capabilities, with a proven track record of adapting complex messaging for diverse technical and executive audiences.
Proven ability to influence cross-functional partners and engineering leadership to align priorities and advance key security programs.

Responsibilities

Lead end-to-end security remediation strategy across the products and infra org by consolidating findings from threat models, code reviews, penetration tests, vulnerability assessments, audits, and postmortems into a unified backlog with clear ownership, prioritization, and defined SLAs.
Establish standardized frameworks for risk identification, tracking, exception management, escalation paths, and remediation validation to ensure operational consistency across security programs.
Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability.
Establish organizational operating rhythms, including goal setting, dependency mapping, key milestone tracking, and quarterly executive readouts, to maintain continuous visibility into OKR execution across security initiatives.
Manage the vulnerability management lifecycle, including scanning scope, remediation cadences, risk exception workflows, and executive reporting on organizational risk posture.
Partner with cross-functional stakeholders to ensure third-party security evaluations remain efficient, standardized, and transparent for internal requesters.
Drive complex security programs from initiation to delivery by orchestrating work across Security, IT, Legal, HR, and Compliance partners while ensuring accountability on deliverables.
Establish organizational operating rhythms, including sprint planning, OKR tracking, and backlog governance, to maintain continuous visibility into program execution.
Elevate documentation standards for program specifications, standard operating procedures, architectural decisions, and incident action items to maintain clarity and discoverability.
Establish metrics and key performance indicators to evaluate program effectiveness and convert security telemetry into actionable technical insights.
Lead postmortem reviews and remediation governance for major security incidents, converting key takeaways into resilient architectural controls, automated mechanisms, and updated operating procedures.
Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability.