Senior Manager, Security Ops & Prod Security
Calendly · Remote - US
About the role
Leads two teams, Product Security and Security Operations, at Calendly, the scheduling software company, the scheduling software company, with the job of maturing and scaling the two functions. The senior manager works closely with Product and Engineering to build security into the development lifecycle and improves how the company detects and responds to threats.
The role sets strategy, operating plans, metrics and resourcing around Calendly's biggest risks, and reports on priorities, trade-offs and program results to senior leadership. On the product side it expands threat modelling, security testing of applications, vulnerability handling and support for developers. On the operations side it oversees detections, incident handling, threat intelligence, monitoring and hunting. The manager stays close enough to the technical work to guide architecture reviews, complex investigations and high-severity incidents and to push fixes for systemic problems, sets standards for how well controls cover applications, cloud, identity and endpoints, and manages the budget and key security vendors.
Calendly wants seven or more years in product, application or infrastructure security combined with security operations, incident response or detection engineering, and at least four years managing experienced security engineers or mixed technical teams. Strong knowledge of secure development, cloud-native architecture, SIEM, EDR and identity security is expected, as is experience with budgets, MSSPs and testing firms. The role is remote in the US, and the company does not sponsor visas. Pay varies by location tier.