Technical Program Manager, Security
Leads cross-functional security programs, including vulnerability management, code scanning, cloud security, dependency management, and remediation across engineering. Requires 5+ years of technical program management experience and hands-on familiarity with security tooling and secure SDLC practices.
About the job
Responsibilities
- Lead and manage security-related initiatives across the organization, coordinating planning, execution, and delivery.
- Execute the engineering security vulnerability management program across infrastructure, code, and dependencies.
- Collaborate with Security and Engineering teams to identify, prioritize, and patch vulnerabilities.
- Provide technical oversight and accountability for security fixes.
- Evaluate security tools, recommend improvements, and drive automation for faster resolution.
- Define a proactive security roadmap based on risk assessment and rating, including the use of AI.
- Run dependency management and image-hardening programs.
- Use AI to contribute to remediation of code and infrastructure vulnerabilities.
- Establish and lead a code-scanning program with infrastructure, engineering, and security teams.
- Assess business systems for vulnerabilities and compliance gaps, develop scanning and detection plans, and establish policies and standards for internal data-access tools.
- Advocate for shift-left tools and solutions that integrate security and testing early in the development lifecycle.
Requirements
- 5+ years of technical program management experience focused on security engineering, vulnerability management, cloud security, and application security.
- Experience applying program-management methodologies, tools, and best practices to complex security initiatives.
- Ability to prioritize, organize, and manage multiple programs.
- Experience collaborating with product teams, SRE/QE engineers, developers, and other cross-functional teams.
- Understanding of application and infrastructure security, data privacy, threat modeling, vulnerability management, and secure SDLC practices.
- Knowledge of network security, encryption, authentication, and authorization.
- Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS technologies, security orchestration, and scripting for security automation.
- Experience researching and validating vulnerabilities and proposing remediation or mitigation strategies.
- Familiarity with OWASP principles, OWASP Top 10 vulnerabilities, and ASVS.
- Current knowledge of cloud-security trends, emerging technologies, and best practices.
- Strong analytical, problem-solving, communication, collaboration, and influencing skills.
Technologies
- Bash
- Python
- JavaScript
- BigQuery
- Looker
- Sigma
- Azure
- AWS
- Google Cloud
- Terraform
- Docker
- Kubernetes
- GitHub
- Buildkite
- SonarQube
- Grafana
- Prisma
- Snyk
- Signal Sciences
- AI tools
Compensation and Benefits
- Oakland pay range: $158,284–$197,855 USD.
- 100% employer-paid medical insurance.
- Generous PTO, paid sick time, inclusive parental leave, holidays, a year-end Global Week of Rest, and volunteer days.
- RSU stock grants.
- Professional development and training opportunities.
- Virtual happy hours, free food, and team-building activities.
- Monthly cell phone stipend.
- Mental health support platform with therapy, coaching, and self-guided mindfulness resources.
Skills
Bash, Python, JavaScript, BigQuery, Looker, Sigma, Azure, AWS, GCP, Terraform, Docker, Kubernetes, GitHub, Buildkite, Sonarqube
Similar jobs
Technical Program Management jobs
Zoox
Foster City, CA
Develops and monitors integrated schedules for vehicle programs from concept through production, coordinating cross-functional milestones and mitigating timing risks. Requires 5+ years of program scheduling or project planning experience, preferably in automotive or manufacturing environments.
Lightning AI
New York, NYLeads infrastructure delivery workstreams spanning compute, networking, storage, hardware, platform engineering, and data center operations. Requires 5+ years of technical program management experience, strong cross-functional execution, and familiarity with infrastructure environments.
Decagon
New York, NY
Own complex enterprise deployments and internal cross-functional programs, translating evolving customer requirements into executable plans and coordinating dependencies across technical and business teams. The role requires 4–6+ years of program or product/engineering operations experience, strong technical fluency, and the ability to lead without authority.
Tessera Labs
United States
Leads technically complex Oracle ERP and AI modernization programs, coordinating engineering teams, enterprise stakeholders, integrations, governance, and customer deployments. Requires substantial Oracle ERP delivery experience, strong enterprise architecture fluency, and exceptional program and stakeholder management.
Baseten
San Francisco, CABuild and lead the Model Performance organization’s technical program framework, coordinating model releases, inference optimization, and cross-functional execution. The role requires deep technical program management experience and credibility with model-serving and performance engineering teams.