Senior Manager, Platform Security (REMOTE)

View full description

Requirements:

• 5+ years in a dedicated security role, preferably in the tech industry.
• 3+ years of experience with AWS, GCP, Azure, or other cloud providers.
• 3+ years in a leadership role influencing company direction on security.
• 3+ years of designing and managing modern security solutions, either building or leveraging top partners (CrowdStrike, Sentinel One, MS, Palo, Wiz, …).
• 3+ years of experience in device management related system management technology solutions (Intune, Ansible, osquery, JAMF, …).
• Hands-on experience in configuring and maturing a data loss prevention (DLP) system.
• Experience applying security controls to exceed third party attestation requirements (PCI, SOC, …).

Responsibilities:

• Define strategic roadmaps for securing endpoints
• Extend traditional messaging security mindset into full collaboration space including conferencing, chat systems and other solutions.
• Grow an engineering focused team to manage security tooling through automation and remove manual
• Drive standardization and consistency of user experience across user platforms regardless of on-site or on-premises.
• Influence and educate leadership at all levels to bring a security minded approach to difficult challenges balancing usability and security.
• Collaborate with product managers, engineering leaders, endpoint and compute leaders and other security teams to solve complex problems with across cloud, compute and collaboration systems.
• Proactively identify opportunities to enhance security measures, streamline processes, and optimize tooling to fortify our environment against emerging threats.
• Develop and implement technology, policies, standards, and guidelines to ensure compliance with industry regulations and frameworks.
• Provide impactful demonstrations and communicate the value of our security measures to the business, highlighting the positive impact on efficiency, customer trust, and overall success.
• Work with our business partners to help prioritize and validate the urgency of mitigation of identified threats and/or non-compliance.
• Work in lockstep with our CSIRT teams to ensure protection coverages, proper detection event notifications, documentation and standards we can all use.