Full Job Description
Summary:
Delinea's Cybersecurity organization is seeking a highly skilled Manager of Product Security to provide leadership and execution for an industry-leading Product Security program. This critical role will be responsible for overseeing and maturing Delinea's Product Security function and developing best-in-class capabilities to secure Delinea's product offerings.
The ideal candidate will be highly collaborative and customer service oriented; driven to make security integration a near-frictionless experience for our developer community. They would have experience in SSDLC, DevSecOps, and Product or Application Security.
This is a challenging and impactful role with security responsibilities that span multiple product offerings. You will be directly responsible for delivering a comprehensive Product Security program that includes Application Security and Vulnerability Management.
This role reports directly to the CISO, is based in the US, and is fully remote.
What You'll Do:
• Design and execute against a Product Security target operating model (people, process, and technology) that incorporates forward-leading agile and DevSecOps best practices.
• Set the tone for the Product Security team culture leveraging best practices in highest performing team building.
• Partner closely with peers in Product Development to integrate security while also ensuring developer enablement.
• Direct the analysis, evaluation, and enhancement of the effectiveness of Product Security postures at procedural and technological levels.
• Use knowledge of current Product Security best practices and industry trends to lead the implementation of Product and Cloud Security solutions.
• Provide strategic and technical leadership with respect to the development and execution of key Product Security services to our developer community, including:
o Performing security architecture reviews of applications in design and production phases.
o Identifying potential threats and attacks to applications systems through threat modeling and providing risk-based mitigation recommendations.
o Ensuring adherence to vulnerability management processes and SLAs.
• Lead architects and engineers to:
o Gain a deep understanding of our current state security architecture.
o Define target state security architecture / multi-year roadmaps and execute secure designs that adhere to security standards, compliance requirements, and best practices.
o Anticipate possible security threats and identify areas of weakness in the current state architecture; respond promptly and effectively to support the security operations team, as needed, with investigating possible breaches of security and root cause analysis.
o Gather and analyze functional requirements and lead proof of concept activities with key business users and stakeholders in support of advanced use cases.
o Work with partner organizations to understand business requirements and develop security solutions to enable the business strategy.
• Oversee the planning, scheduling, and resource allocation for Product Security initiatives, ensuring projects are completed on time, within scope, and on budget.
• Collaborate with Cybersecurity and other internal teams, including IT, product, and operations, to ensure Product Security initiatives meet regulatory, industry, and security standards.
• Act as the primary point of contact for all Product Security-related inquiries, escalating issues as needed to senior leadership and external stakeholders.
• Drive continuous improvement efforts within cybersecurity processes, incorporating best practices and lessons learned.
• Prepare and deliver presentations and reports to executives, stakeholders, and auditors on the status and effectiveness of Product Security program.
• Participate in customer-facing calls and review customer contracts to address Product Security-related inquiries.
What You'll Bring:
• Up-to-date knowledge of the current Product Security threat landscape and industry best practices.
• Bachelor's degree in Computer Science, Information Security, Business Administration, or a related field. Master's degree preferred.
• 8+ years of relevant experience in Product, Application, and Cloud Security, with 3 years of Product Security leadership experience preferred.
• Proven track record of solving complex Product and Cloud Security issues and protecting products using a risk-based approach.
• Experience with establishing Secure SDLC frameworks and evaluating DevSecOps programs to determine how to embed security activities within by partnering with product teams.
• Experience supporting recruiting, technical interview screening, and team development.
• Ability to innovate and find creative solutions that balance the needs of the business with the needs of security.
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Effective executive functioning and presentation skills.
• Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization.
• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines.
• Minimal travel (
We'd Love to See:
• Understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR, FedRAMP, Common Criteria).
• Cybersecurity certifications (e.g., CISSP, CISM, CSSLP, CCSP, or similar).
• Familiarity with Jira and Confluence.
• Background in Software development.
We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.
