Security Platform Engineering Manager

As Security Platform Engineering Manager, you define and build a reusable security platform that embeds controls into infrastructure and CI/CD pipelines. You’ll lead a small team, partnering with Cloud Platform Engineering and Security Operations to reduce risk through automation and developer-friendly safeguards. Your work shapes a scalable, automated security capability aligned to an AWS-first, Terraform-led model, delivering security as an internal product for engineering squads. You drive adoption, set standards, and mentor a high-performing team in a regulated, platform-driven environment.

• Define strategic direction and technical vision for security platform engineering with stakeholders
• Build and lead a small team delivering reusable security capabilities as platform products
• Own the roadmap and delivery across cloud infrastructure, CI/CD, IAM, and integration patterns
• Engage with internal customers to understand evolving use cases for the security platform
• Contribute hands-on to the platform, establishing technical standards and approaches
• Operate and support security platform services with reliability targets and continuous improvement
• Drive measurable adoption of security platform services and report on coverage and risk reduction
• Stay current with industry trends and incorporate them into the roadmap
• Mentor and coach the team through pairing, feedback, and leadership behavior

• Securing cloud native workloads in AWS and serverless contexts
• Managing services for secure applications (firewalls, package management, secrets management)
• Deep understanding of IAM and least privilege design
• Integrating security controls into CI/CD pipelines (GitHub Actions)
• Enforcing security standards on Infrastructure as Code (Policy as Code)
• Translating regulatory/security policy into automated engineering controls
• Leading cross-functional delivery with multiple stakeholders
• Experience building and operating security capabilities at scale

• leadership in cross-functional environments
• mentoring and coaching
• communication with multiple stakeholders
• AWS cloud and serverless architectures
• Firewalls, package management, secrets management
• IAM and least privilege design