Senior Manager, Security Engineering
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Manager of Security Engineering at Vanta, guiding application security implementation and leading a talented team. Focused on leveraging AI and managing security risks in a SaaS environment.
Responsibilities:
- Lead and grow a team of the best security engineers in the world, with a view of security that is engineering-driven, human-centric, and trust-based.
- Help define the strategy for Vanta’s application security program, and empower the team to implement robust security protocols and stay ahead of emerging threats.
- Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program.
- Work with the Engineering and Product Development team to assess and communicate acceptable levels of risk, mitigate that risk, and help ensure that Vanta products are developed with security in mind.
- Provide, both individually and through your team, expert feedback to Vanta’s Product, Engineering, and Design teams on our product offerings and serve as a strong customer voice in product development.
- Represent Vanta’s products, vision, and voice as a trusted security thought leader in public security forums.
Requirements:
- Strong leadership experience in engineering-driven security and an ability to lead a technical team from a foundation of transparency and trust.
- Inherent alignment with our trust-based, human-centric security culture and our Security Engineering and Security Operations Team Principles – both internal to Vanta and externally – that is not based on using tactics of fear, uncertainty, or doubt as levers for action.
- Strong application security experience, with emphasis on implementing security controls in a SaaS environment.
- Familiarity with relevant industry regulations and standards (e.g., GDPR, ISO 27001, NIST 800-53) and experience ensuring compliance.
- Experience with leveraging AI to improve security processes.
- Understanding of a wide range of security technologies and an ability to stay updated on latest cybersecurity threats and trends; Deep understanding of / ability to guide and communicate technical direction for internal application security programs, including familiarity with common vulnerabilities like OWASP Top 10, and security tooling such as SAST, DAST, and other application security testing technologies.
- Ability to assess and analyze security risks comprehensively, considering both business impact and technical impact; Ability to prioritize risk remediation with consideration to business goals and objectives.
- Ability to build trust and strong partnerships internally with Product, Engineering, and other teams toward security goals.
- Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.
Benefits:
- Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
- 16 weeks paid Parental Leave for all new parents
- Health & wellness stipend
- Remote workspace, internet, and cellphone stipend
- Commuter benefits for team members who report to the SF and NYC office
- Family planning benefits
- Matching 401(k) contribution with immediate vesting
- Flexible PTO policy, plus 80 hours of Sick Time
- 11 company-paid holidays
- Virtual team building activities, lunch and learns, and other company-wide events!
Similar Jobs
Cloud Security Engineer
Cloud Security Engineer responsible for implementing and managing security controls across Microsoft 365 and Azure environments. Collaborating with teams to ensure compliance and security effectiveness.
Director, Data – Cloud Security
Director of Data Security & Cloud Security at Zayo, responsible for enterprise data protection and cloud security initiatives. Leading teams to safeguard sensitive data and secure cloud platforms.
Senior Security Engineer
Senior Security Engineer at Infisical responsible for building and scaling security across systems. Join a remote team aiming to enhance security infrastructure for AI applications.
Online Associate Faculty – Bachelor of Science in Cyber and Data Security Technology
Online Adjunct Faculty for Bachelor of Science in Cyber & Data Security Technology program. Engaging in online instruction, grading, and fostering a student-centered learning environment.
Technical Compliance Analyst – Security Focused
Technical Compliance Analyst at White Hat Gaming maintaining compliance for iGaming platform infrastructure and operations. Collaborating with legal and technical teams to navigate regulatory requirements.
Project Manager – Cybersecurity, Senior
Project Manager in cybersecurity services leading planning and execution of complex tech projects. Working with multifunctional teams and managing budgets to meet project objectives.
Physical Security Specialist
Protect bank's physical assets and operations through security controls and assessments. Oversee security compliance and lead incident response efforts while partnering with stakeholders.
Lead Cyber Security Subject Matter Expert – DLA VM Support
Cyber Security Subject Matter Expert - Lead for Defense Logistics Agency. Providing expert support and analysis for cybersecurity assessments in a fully remote capacity.
Operation Technology Security Engineer – DLA VM Support
Operation Technology Security Engineer providing DLA VM Support at Horizon Industries. Focused on Cybersecurity for operational technology systems relevant to DOD standards.
VP, Information Security
VP of Information Security at Brightside Health guiding security and IT functions in a high-growth telehealth environment. Fostering collaboration across teams while ensuring compliance and security standards.
Enablement Solutions Program Manager, Security
Solutions Enablement Program Manager at HPE driving success and adoption of Networking's Security portfolio. Collaborating with marketing and product teams to enable sales through effective training and resources.
Cybersecurity Engineer – Data Loss Prevention, Messaging Security
Cybersecurity Engineer leading the secure deployment of data loss prevention strategies in remote role. Focus on data loss and messaging security across Microsoft 365 and Check Point gateways.
Project Manager, Cybersecurity
Project Manager leading technology implementation and hardening projects for Athena7 at Fenix24. Coordinating teams and managing client expectations to deliver projects on time and budget.
Homologation Lead – Passive Safety
Leader in homologation overseeing complex passive safety projects at UTAC. Engaging with clients and regulatory bodies while ensuring adherence to safety standards.
IT, Cyber Security Auditor
Cybersecurity Auditor securing applications for financial messaging industry. Leading global audit assignments and assessing technology controls effectiveness.
Senior AI Security Engineer
Senior AI Security Engineer at Mirantis focusing on security for AI products and infrastructure. Collaborating with teams to implement secure practices and manage risk in AI capabilities.
Senior Director Analyst, Cybersecurity, Governance, Risk & Compliance
Senior Director Analyst creating actionable cybersecurity insights at Gartner. Leading thought leadership and client engagement across Europe with a focus on Cyber GRC and information security.
Principal Security Engineer, SaaS Security Posture Management
Principal Security Engineer working on SaaS Security Posture Management program for Salesforce. Lead security assessments and secure configuration strategies for third-party suppliers.
Senior Analyst – Workday Security, HCM
Sr HR Analyst overseeing Workday Security and Core HCM design in complex global environment. Collaborating with HR and IT stakeholders for optimal system performance.
Senior Director, Health, Safety, Security & Environment
Senior Director responsible for implementing HSSE strategies across JLL-Technical Services. Leading compliance and risk management for Data Centers and Critical Environments.