Engineering Manager - Security Job at Plaid (San Francisco)

Security Engineering Manager

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabi...

Location

Salary:

185000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

BS in Computer Science or equivalent experience
5+ years building and securing software — hands‑on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures
Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation
Experience leading security or engineering teams — setting strategy, running scrums, conducting reviews, and mentoring talent
Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production
Exposure to offensive and defensive security practices — red team, blue team, or incident response experience a plus
Ability to communicate risk and solutions to execs, engineers, and auditors — respected by hackers and trusted by leadership
Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe

Job Responsibility

Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance)
Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work — ensuring all three disciplines are aligned
Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers
Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails)
Build internal security tools and automation that make it easier for product teams to ship securely
Oversee red team engagements and turn findings into actionable fixes, not just reports
Manage defensive capabilities — incident response, detection engineering, monitoring — and continually improve them
Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy
Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions
Balance being a builder and a leader: stay hands‑on enough to earn respect from hackers, but prioritize leading and scaling the team’s impact

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
The 4 holidays are: New Year’s Day, Fourth of July, Thanksgiving, and Christmas Day
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Use to make your remote work set up more comfortable, for continuing education classes, a plant for your desk, coffee for your coworker, a massage for yourself... really, whatever
Open concept office with friendly coworkers

Cyber Security Engineer

Cyber Security Engineer position at Sopra Steria, a major Tech player in Europe ...

Location

India , Noida

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Governance - Security Operational Tasks support & governance. Compliance and Risk Management
Vulnerability Management - vulnerability (infra and app) scans and remediation plans
SMP (Security Management Plan) - preparing, reviewing and managing
Authorisation management - should have managed the accounts & controls in the Infra scope
Security Patch management - end-to-end coordination and implementation
Security product management - Antivirus Management, like TrendMicro, Defender, etc...
Security incident management - Managing the end-to-end security incident lifecycle with corrective measures
Audit support - support auditors' mandate on the security system and artefacts
Mitigation - thinking analytically and executing efficiently. Analyse and optimise orchestration and automation between security tools
Vendor Management, Collaboration, Facilitation - Excellent customer-facing skills and significant experience building strong client relationships

What we offer

Commitment to fighting against all forms of discrimination
Inclusive and respectful work environment
Open to people with disabilities

Fulltime

Infrastructure Security Engineering Manager

Ready to lead a team while staying deeply hands-on? This critical, autonomous ro...

Location

United Kingdom , Manchester

Salary:

80000.00 - 120000.00 GBP / Year

Matillion

Expiration Date

Until further notice

Requirements

Very strong communication skills, with the ability to explain complex security risks to both technical engineers and non-technical stakeholders
Fluent in AWS cloud and cloud security, with experience in GCP and Azure considered a bonus
Strong background in coding and automation
this role requires someone very technical who has built custom automation or workflows to solve security problems
Hands on cloud security and security incident response lead who has managed high profile public security incidents
Experience with cutting-edge technology, AI, and developing solutions where no end-to-end workflow currently exists

Job Responsibility

Lead the entire Infrastructure and Cloud Security domain, building defence and security best practices across our multi-cloud environment (AWS, GCP, Azure)
Act as a hands-on technical leader, coaching and guiding a junior team to improve their confidence and technical progress
Drive key projects, including securing Matillion’s AI infrastructure and the data associated with it (using technologies like Bedrock and Cloud)
Develop and implement security automation, utilising AI and cutting-edge technologies to enhance our cyber attack response capabilities
Collaborate heavily with other departments (IT, Sales, etc.) to detect malicious activities, educate on security risk, and manage the overall security posture

What we offer

Company Equity
30 days holiday + bank holidays
5 days paid volunteering leave
Health insurance
Life Insurance
Pension
Access to mental health support

Fulltime

Service Delivery Manager - Managed Security

HPE Operations is our innovative IT services organization. It provides the exper...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

5+ years of experience in managed security services, cybersecurity delivery management, or IT service management
Proven track record of managing complex client relationships and delivering managed services
Experience working with Security Operations Centers (SOC) or MSSPs is highly desirable
Should have managed a team of Cyber Security engineers including SIEM, Vulnerability, IAM, HSM, etc
Experience in at least 3 of the below products is desirable: Microsoft Sentinel with Copilot, Microsoft Defender including VA, Thales HSM & Cipher Trust Manager, CyberArk PAM, Nexus Smart ID

Job Responsibility

Oversee the end-to-end delivery of managed security services, such as threat monitoring, incident response, vulnerability management, endpoint protection, and other cybersecurity services
Ensure services are delivered in compliance with Service Level Agreements (SLAs) and established security frameworks (e.g., NIST, ISO 27001)
Monitor and measure the performance of managed security services, identifying areas for improvement and ensuring high-quality service delivery
Manage and coordinate teams responsible for delivering managed security services, including security analysts, engineers, and consultants
Collaborate with internal teams (e.g., SOC, engineering, compliance) to ensure seamless service delivery and resolution of client issues
Provide leadership, guidance, and support to team members, fostering a culture of accountability and continuous improvement

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Engineering Manager, Product Engineering

Engineering is the backbone of Everlaw. We build features that delight our custo...

Location

United States , Oakland

Salary:

198000.00 - 250000.00 USD / Year

Everlaw

Expiration Date

Until further notice

Requirements

BS/MS or PhD in Computer Science (or equivalent)
Sound foundational understanding of a wide range of computer science topics and concerns relating to system and software design
At least 5 years of experience as a senior engineer building product features and full-stack web applications
Good dynamic range that you apply to different situations - you can step back and empower, while also diving deep into the code to understand the details
Ability to communicate at the right altitude with both technical and non-technical stakeholders
Experience working with stakeholder teams (internal and/or external) in setting and collaborating on technical roadmaps
Experience communicating with customers articulating to them how the platform works on reliability, security and compliance matters
At least 1 year experience leading software engineers - either as a manager managing engineers or as a technical lead managing the technical workstreams of software engineers
Experience managing the technical workstreams of software engineers and supporting them in execution
Demonstrated ability to lead an inspired, high performing and highly motivated and accountable team

Job Responsibility

Build features and functionality for the Everlaw core product
Work closely with Product, Design, DevOps, Security Engineering and application engineering leads to synthesize requirements and prioritize efforts
Lead roadmapping, resourcing and execution for critical features and capabilities
Support and coach engineers in their career development and growth
Work closely with Engineering Operations team to improve processes to help with goal setting, empowerment and execution across Everlaw Engineering efforts
Critically observe and understand Everlaw’s platform, tooling and processes
Understand current and upcoming challenges and requirements from the viewpoint of multiple stakeholders
Understand company goals and Product roadmaps
Strategize, prioritize, resource and execute against features
Actively coach your reports to deliver on projects and ensure they get the right types of feedback and coaching they need to succeed in their careers

What we offer

Equity program
401(k) retirement plan with company matching
Health, dental, and vision
Flexible Spending Accounts for health and dependent care expenses
Paid parental leave and approximately 10 days (80 hours) per year of sick leave
Seventeen paid vacation days plus 11 federal holidays
Membership to Modern Health to help employees prioritize mental health and wellness
Annual allocation for Learning & Development opportunities and applicable professional membership dues
Company-sponsored life and disability insurance
Work in Uptown Oakland, just steps from the BART line and dozens of restaurants and walking distance to Lake Merritt

Fulltime

Product Security Engineer - Secure SDLC Analyst

HPE Aruba Networking is looking for a person excited to work at the intersection...

Location

United States , San Juan

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

BS in Information Security, Computer Science, or related technical field
A background in software security, either academic or work experience, including reverse engineering, vulnerability classes such as buffer overflows and their prevention, web application security, and/or cloud security
Programming knowledge of at least one programming language with the ability to look at source code and figure out what it’s doing
Familiarity with the purpose of tools such as IDEs, compilers, source code revision control systems, ASPM, SCA and code scanners
Minimum 3 years of experience working directly in software engineering or in an adjacent field with exposure to the software engineering environment
Experience conducting risk assessments, threat modeling, and/or compliance assessments
Experience supporting the integration of security practices through the software development lifecycle

Job Responsibility

Assist in the execution of product compliance assessments against various frameworks (e.g. NIST SSDF, NIST SP 800-218, SP 800-53, CIS Benchmarks)
Assist in the development and/or maintenance of GRC and SDLC tooling implementations, including scripting and automation
Operate as a representative of HPE Aruba in working groups, with government representatives, and with auditors
Provide consulting, information, and advice to product teams around implementing and improving the maturity of our SDLC
Document known issues and provide information to product teams in a manner which allows for easy interpretation and corrective actions to be performed
Monitor worldwide government standards and communicate to management and product teams when changes are made that may impact an existing control or introduce new requirements

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Principal Security Engineer

We’re building a world-class global Security team as part of our Trust Program. ...

Location

India , Hyderabad

Salary:

Not provided

Highspot

Expiration Date

Until further notice

Requirements

10+ years of robust, progressive experience in security engineering, application security, DevSecOps, incident detection and response, or closely related fields
Advanced proficiency in at least one programming language (Python, Ruby, Go, Rust, JavaScript), with deep experience conducting detailed code reviews and security assessments across multiple languages
Hands-on experience with deploying, operating, and interpreting results from security tools such as static analyzers, web vulnerability scanners, supply chain analysis scanners, and host-based intrusion detection systems
Demonstrated experience mentoring, coaching and guiding junior and mid-level security engineers, contributing to a strong team culture, and supporting peer development as a senior individual contributor
Demonstrated proactive approach, strong continuous learning orientation, and curiosity about emerging threats, security trends, and innovative technologies
Extensive expertise securing cloud-native environments (AWS, Azure, GCP, containers, microservices), with in-depth knowledge of modern cloud security risks and defenses
Demonstrated ability to embrace being wrong, practice humility, continuously learn from experiences, and actively seek insights through thoughtful questioning and collaboration

Job Responsibility

Lead comprehensive application security assessments, advanced threat modeling sessions, and secure code reviews across critical product features, internal tooling, endpoints, and third-party integrations
Collaborate strategically with product engineering to establish and enhance secure-by-default and privacy-by-design practices within the software development lifecycle (SDLC)
Lead and otherwise participate in incident detection, investigation, triage, containment, and root cause analysis for high impact security incidents, providing mentorship and guidance to junior engineers as required
Drive the development and continuous improvement of sophisticated detection rules, response automation, and optimized alert management across cloud environments, corporate infrastructure, and SaaS platforms
Lead and participate in complex vulnerability remediation processes, and effectively respond to security issues discovered by both internal teams and external sources
Document technical findings and strategic decisions in a clear and accessible manner, and procedural enhancements
significantly contribute to comprehensive security playbooks and knowledge repositories
Manage and oversee asksecurity@ request handling, and actively participate in sprint-based security activities, balancing strategic and tactical execution
Actively participate in the security on-call rotation, or provide senior-level guidance as required during an event and aid in rapid response capabilities to protect our 24x7 platform and global workforce

Fulltime

Select Country

Engineering Manager - Security

Job Description

Job Responsibility

Requirements

Looking for more opportunities?