Manager, Product Security Engineering

Leads Dragos's product security team, including its Principal and Staff Product Security Engineers, as a working manager who spends about half the time on people leadership and half as a hands-on engineer. The role is remote in the US.

The manager handles hiring, career development and performance, turns the technical strategy set by the Principal engineer into a roadmap, and prioritises the team's vulnerability hunting and patching, including novel zero-day findings in Dragos products, against certification deadlines and customer commitments. Personally, the manager drives certification and accreditation work such as DISA STIG hardening and authorisation packages, SOC 2 and ISO 27001, builds evidence collection so renewals and audits go smoothly, and contributes to remediation, SAST and DAST tooling, assessments and PSIRT response. The role coordinates with Compliance, Legal and Sales Engineering on customer questionnaires and audits, and reports certification posture and remediation SLAs to engineering leadership.

Dragos wants five or more years in cybersecurity or product security, one to two years leading security engineers or acting as a player-coach, direct experience obtaining SOC 2 Type II, ISO 27001, FedRAMP or STIG authorisations, SAST and DAST integration into CI/CD, and security experience across cloud, on-premises and virtualised environments. ICS and OT knowledge is a plus.