Staff Security Manager

At HackerOne, we empower the world to build a safer internet. We are looking for an experienced Security Manager to lead our security engineering team in a fully remote environment. In this role, you will lead a team of high-performing security engineers, define secure software development standards, and drive automated security practices across our global product platforms.

Responsibilities:

• Team Leadership and People Management: Hire, mentor, and grow a team of talented security engineers. Set clear performance goals, foster technical growth, and manage team deliverables.
• Secure SDLC and Governance: Establish and enforce secure coding standards, OWASP compliance guidelines, and threat modeling across all product engineering teams.
• Security Automation and CI/CD: Drive the adoption of automated security testing tools (SAST, DAST, dependency scans) directly into engineering delivery pipelines to eliminate vulnerabilities early.
• Vulnerability and Incident Management: Oversee vulnerability management workflows, risk prioritization, incident response, and continuous monitoring of core applications and infrastructure.
• Cross-Functional Strategy: Partner closely with engineering directors, product managers, and executive leaders to balance product velocity with robust security controls.

Requirements:

• Bachelor's Degree in Computer Science, Cybersecurity, or a Related Technical Field.
• 6 years of total experience in software/security engineering, including 3+ years of direct people management experience.
• Strong deep-dive technical background in application security, OWASP Top 10 mitigation, secure coding practices, and cloud security.
• Track record of implementing security automation, CI/CD security integration, and secure SDLC practices.
• Excellent communication skills with the ability to articulate technical security risks to non-technical stakeholders.

Preferred Qualifications:

• Industry certifications such as CISSP, CISM, or similar credentials.
• Experience managing distributed, remote engineering teams across multiple time zones.
• Background working with cloud-native architectures (AWS, GCP, or Azure) and containerized environments.