About the role

We're looking for an experienced Engineering Manager within the Infrastructure Engineering group to lead our Security Engineering team. Security engineering at Reverb is responsible for leading, designing, and building secure systems and practices for our e-commerce platform. They are highly involved in planning technical systems, designing secure practices, governance, and proactive engagement with the engineering and product organizations.

The Security Engineering Manager leads our security engineers and analysts in protecting, planning, and building scalable, hardened systems across our architecture. You'll be leading these security professionals by contributing to project oversight and planning, security assessments, long-term scope planning, proactive and preventative approaches, and being a collaborative management professional who can quickly lead our organization to make safe and practical decisions.

This is a full-time, hybrid position reporting to the Senior Director of Engineering, Infrastructure. Our hybrid team members work from our Chicago office once a week [on Tuesdays]. Local candidates are preferred; however, we are open to fully remote candidates within the US for the right fit.

Responsibilities

• Day-to-day management of security engineers and analysts at Reverb
• Security sprint planning and retrospectives
• Collaborate with other engineering managers to achieve roadmap goals
• Perform security reviews, audits, assessments, and remediation actions or reporting
• Engage in highly technical architecture feedback and design reviews
• Hands-on engagement with git, DevOps, and security tools to help bolster understanding with other technical teams
• Advise crucial GRC, technical, and policy to engineering leadership

Requirements

• 2+ years leading or supervising security teams
• 2+ years of hands-on experience with AWS, Terraform, Helm, Kubernetes, or other generalized DevOps tooling
• 4+ years of experience in the security domain with technical expertise or contributions
• Track record of crafting, developing, and handling security projects
• Ability to develop policy, process, and procedures to apply to engineering organizations
• Detection and Response concepts with SIEM, EDR, Incident Management, IDS, and WAF like Cloudflare, Datadog, incident.io, etc.
• Experience with Vuln Management, CICD Security, BugBounty
• Regulatory experience such as PCI, FEDRAMP, SOX, etc.
• Knowledge of Authentication, RBAC, and IAM systems like Okta, AWS SSO, etc
• Experience with JIRA and Confluence
• Experience with Git

Nice to Have

• Deep networking and threat modeling experience
• Experience with AST tools like GHAS, Snyk, or ArmorCode
• Experience with CrowdStrike platforms
• Deep experience with GitHub and GitHub security controls
• Hands-on experience with AWS EKS, Rancher, or other Kubernetes platforms

Additional Information

Remote-eligible roles (as indicated in the location header of each job description) are available in all U.S. states except Alaska and Hawaii. Remote roles are currently only available within the U.S. unless otherwise specified in the specific job description.

Reverb offers a comprehensive total rewards package that combines base, bonus, and an array of benefits. Some of our key benefits include but are not limited to the following:

• 100% paid premiums for medical, dental, and vision coverage for the employee, spouse or domestic partner, and all eligible dependents. Medical coverage includes gender affirming care.
• Life, AD&D, and supplemental long-and short-term disability insurance
• A matching 401(k)
• A generous PTO policy that includes vacation, sick/mental health days plus 11 paid holidays and two floating holidays
• Professional development and continued learning opportunities through access to mentoring, 1:1 coaching, and platforms like Skillsoft
• 18 weeks of gender-neutral parental leave for the birth or adoption of a child
• Up to $25,000 reimbursement of adoption and/or surrogacy related expenses
• Paid sabbatical program
• Annual work/life stipend
• Ways to give back to your community through volunteer time off

We know that the impostor syndrome and confidence gap are real. Please do not hesitate to apply!

The pay range for this role is:

171,000 - 223,000 USD per year (US US-Chi)