# Security Technical Program Manager

**Company:** [Gusto](https://hotfix.jobs/companies/gusto)
**Location:** Denver, CO, San Francisco, CA
**Role:** Technical Program Management
**Salary:** $138k – $189k/yr
**Experience:** 5+ years
**Skills:** Vulnerability Management, security operations, SIEM, cspm, dspm, container scanning, dependency scanning, secrets detection, privileged access management, jit access, secure sdlc, SOC 2, ISO 27001, ai plugins, wiz
**Posted:** 2026-07-20

> Own the definition and delivery of Gusto's vulnerability management and security operations programs. Drive centralized vulnerability scorecard, expand detection coverage, harden SDLC, and deliver security metrics while using AI plugins to accelerate delivery across Security, Infrastructure, and GRC teams.

## Job Description

## Responsibilities
- Set the strategy and roadmap for vulnerability management and security operations as Gusto becomes an AI-native company.
- Define what good vulnerability management and security operations look like for an AI-first business.
- Run intake and prioritization with senior stakeholders.
- Lead delivery of the centralized vulnerability management program: coverage across code, cloud, data, and edge; CSPM/DSPM, container scanning, dependency and secrets detection, and owner-based remediation routing to closure.
- Lead security operations delivery: expand high-risk detection and alerting across systems and vendors, impersonation and privileged-access logging, SIEM integration, insider-risk telemetry, and logging of agentic activity.
- Stand up the daily security-health and vulnerability-management metrics dashboards leadership uses to run the business, and drive monthly vulnerability reporting.
- Build security workflows that run on AI plugins by default.
- Build the plans, manage scope and risk, track milestones, and deliver against every audit and regulatory commitment.
- Roll out new controls, like risk-scored PR review, JIT privileged access, and secrets management.
- Manage stakeholders and vendors, hold them to commitments, watch program budget, tooling spend, and implementation costs.

## Requirements
- History of taking programs from ambiguous to shipped in regulated environments.
- 5 to 8+ years leading cross-functional TPM or delivery work, with real time spent on security, infrastructure, or platform engineering.
- Solid handle on vulnerability management and security operations, from scanning coverage and remediation SLAs to detection engineering, SIEM/monitoring, and identity and privileged access.
- Way of working where AI plugins drive everyday delivery.
- Ability to speak the language of security engineering, infrastructure, GRC, and R&D.

## Nice-to-Haves
- Familiarity with the modern security stack, including vulnerability and asset scanners (e.g., Wiz, Axonius), code security (dependency and secret scanning), SIEM/detection (e.g., Panther), and identity/JIT access (e.g., Opal).
- Hands-on experience using AI clients and plugins (MCPs) to generate program artifacts.
- Working knowledge of control frameworks like SOC 1/2 and ISO 27001, plus secure SDLC practices.
- PM certification (PMP, CAPM, Scrum, or Prosci).
- Time spent in high-growth fintech or another regulated, fast-paced industry.

## Compensation
- Cash compensation targeted at $138,000-156,000 in Denver and $168,000–189,000 in the San Francisco Bay Area. Stock equity is additional.

## Similar roles

- [Program Manager](https://hotfix.jobs/jobs/9c40600f-4f6d-4f6a-8f32-79c768d61e22) - Skydio - Remote - $140k – $175k/yr
- [Clinical Program Manager](https://hotfix.jobs/jobs/a245c653-27f4-4e12-a0a8-162ebd31c070) - Axle - Bethesda, MD - $140k – $150k/yr
- [Agile Delivery Manager](https://hotfix.jobs/jobs/c07050df-b424-43c4-94de-88ee95331d6b) - Limble - Remote - $140k – $150k/yr
- [Engineering Program Manager, Hardware](https://hotfix.jobs/jobs/60a1714b-987b-4943-bab4-02c2059279da) - Eightsleep - San Francisco, CA - $140k – $230k/yr
- [Engineering Project and QA Manager](https://hotfix.jobs/jobs/b3b19bc1-9db7-4131-a4c4-5c31a64bf48e) - CodePath - Remote - $140k – $178k/yr

**Apply:** https://hotfix.jobs/jobs/370be8e1-0565-49e2-9ded-6e045dde4bc4
**Canonical:** https://hotfix.jobs/jobs/370be8e1-0565-49e2-9ded-6e045dde4bc4