Manager, Product Security

Leads and matures the Product Security function at Delinea, reporting directly to the CISO. The programme covers application security and vulnerability management across several product offerings, and the manager builds the team, its culture and its operating model across people, process and technology.

The role partners with Product Development to build security into an agile, DevSecOps way of working while keeping friction low for developers. It directs security architecture reviews of applications in design and production, threat modelling with risk-based mitigations, and adherence to vulnerability management processes and SLAs. The manager leads architects and engineers in defining a target security architecture and multi-year roadmap, supports security operations on investigations and root cause analysis, plans and resources product security initiatives, and reports on the programme to executives, stakeholders and auditors. Customer calls and contract reviews on product security questions are part of the job.

Delinea wants eight or more years in product, application and cloud security, ideally with three leading product security, and experience establishing secure SDLC frameworks and assessing DevSecOps programmes. A bachelor's degree in computer science, information security or a related field is required, with a master's preferred. Knowledge of frameworks such as NIST, ISO 27001, FedRAMP and Common Criteria, certifications such as CISSP or CSSLP, and a software development background are welcome. The role is fully remote in the US with under 10% travel.