Engineering Manager, Security

Recharge is the subscription platform for the world’s fastest-growing and most innovative brands, focused on building the future of commerce around customer retention. The Engineering Manager, Security will design, implement, and maintain security measures for the cloud network infrastructure, ensuring the confidentiality, integrity, and availability of critical systems while leading a high-performing engineering team.

Responsibilities:

• Manage a first-class engineering team that will scale as the company and business grows, identifying and filling any team gaps
• Develop a team-oriented, supportive culture with a strong focus on creating a working environment that fosters collaboration, open communication, and delivering outcomes
• Be responsible for team output and hands on day-to-day writing and reviewing code
• Constantly improve team productivity, refine agile processes, and create methods to increase efficiency
• Design, implement, and maintain secure network architectures, ensuring the confidentiality, integrity, and availability of data
• Create and maintain network and security documentation
• Collaborate with cross-functional teams to integrate security measures into network designs and implementations
• Integrate application security tools and processes with automated release management tools
• Utilize AI tooling to implement skills files for vulnerability triage, root cause analysis, scope analysis and vision MR creation
• Utilize your strong working knowledge of our technical stack to apply sound application security practices
• Configure and manage firewalls (including WAFs), intrusion prevention systems, SIEM, and other network security devices and/or tools
• Monitor network traffic for unusual activity and respond to security incidents in a timely manner
• Conduct regular vulnerability assessments on network infrastructure to identify and remediate potential security risks
• Stay abreast of emerging threats and vulnerabilities, applying proactive measures to protect against them
• Maintain and continuously improve incident response plans, participate in tabletop exercises, and lead incident response efforts when necessary
• Collaborate with internal teams and external stakeholders to investigate and mitigate security incidents
• Mentor other engineers on security configurations and best practices
• Investigate, analyze and evangelize good security posture throughout the organization
• Live by and champion our values: Accountability, Collaboration, Iteration and Details

Requirements:

• Network security design experience and an in-depth knowledge of network protocols, firewall configurations, and intrusion detection/prevention systems
• Cloud infrastructure security knowledge including hardening standards, CSPM tools, VPN/remote access management and authentication technologies such as SAML, OAuth
• Robust understanding of WAF technologies such as Akamai, Cloudflare, Google Cloud Armor, Imperva, etc
• Experience configuring SIEM tools such as Splunk, LogRhythm, Panther etc
• Extensive knowledge of Vulnerability Management practices
• Understanding of virus and malware defense systems such as Crowdstrike, Sentinel One, Trend Micro, etc
• Understanding of backup systems and disaster recovery planning
• Experience with security assessment tools and techniques
• Ability to manage multiple projects, activities, and tasks simultaneously
• Ability to learn and support new systems and applications
• Strong analytical and problem-solving skills
• Excellent communication and collaboration skills
• Willingness to participate in a first line of support on-call rotation
• Desire to work remotely and to make an impact
• 3+ years experience managing high performing security teams
• 10+ years experience in network and/or security roles, with a focus on edge security tools
• 2+ years experience with Infrastructure as Code tools such as Helm, Terraform, Docker, Linux, Kubernetes, etc
• 2+ years experience with Monitoring, Metrics and Logging solutions such as Splunk, Datadog, ELK stack, Axiom, etc
• 2+ years experience configuring SIEM tools such as Splunk, LogRhythm, Panther, etc
• 5+ years experience in cloud-native environments such as GCP, AWS, or Azure
• Bachelor's degree in Computer Science, Information Technology, or related field
• Relevant certifications such as CISSP, CCSP, GSEC, or equivalent