Product Security Engineering Manager

🕒 April 9

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bugcrowd

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 $30M Series D on 2020-04

Cybersecurity • SaaS • Enterprise

Bugcrowd is a leading platform that provides continuous security testing solutions, enabling organizations to stay ahead of cyberthreats. By leveraging a global community of trusted security researchers, Bugcrowd offers services such as penetration testing as a service, vulnerability disclosure, bug bounty programs, and attack surface management. The company assists industries such as financial services, healthcare, and technology in identifying and prioritizing vulnerabilities, ensuring proactive protection against potential cyber attacks. Driven by data and AI, Bugcrowd's comprehensive approach integrates seamlessly with existing systems to streamline the remediation of security issues, enhancing the overall security posture of its clients.

📋 Description

• Set strategy and lead execution of application security, platform security, and federal (FedRAMP) programs • Grow and mentor a geographically distributed team of security engineers • Own and evolve our secure development lifecycle • Drive "shift-left" initiatives across architecture reviews, threat modeling, SAST/DAST, continuous end-to-end testing, and advanced fuzzing • Design and launch a Security Foundations program focused on secure-by-default engineering • Own the security roadmap and day-to-day operations of our FedRAMP program

🎯 Requirements

• 7+ years of experience in cybersecurity, with a focus on Product Security, Application Security, or Platform Security • 2+ years of experience directly managing and mentoring a team of security engineers • Demonstrable experience driving sustained improvement and managing complex projects that span multiple teams and business units • Excellent communication skills with a proven ability to build strong partnerships with software engineering, DevOps, and product management teams, and operations teams. • Deep, hands-on experience integrating security into modern CI/CD pipelines • Highly proficient in threat modeling, architecture reviews, implementing automated testing (SAST, DAST, SCA, Fuzzing), and SDLC program management • Fluency in at least one or more modern programming languages (e.g., Python, Go, Ruby, Java) to facilitate code reviews, script automation, and build out security tooling • Strong understanding of cloud-native architectures (AWS, GCP, or Azure), containerization (Kubernetes, Docker), Linux, and Infrastructure as Code (Terraform) • Practical experience supporting compliance requirements such as Fedramp (preferred), PCI, SOC2, ISO27001, NIST 800-53

🏖️ Benefits

• Discretionary bonus program or commission plan