Security Engineering Manager

Reverb is the largest online marketplace dedicated to buying and selling new, used, and vintage musical instruments. They are seeking an experienced Engineering Manager to lead their Security Engineering team, responsible for designing and building secure systems for their e-commerce platform.

Responsibilities:

• Day-to-day management of security engineers and analysts at Reverb
• Security sprint planning and retrospectives
• Collaborate with other engineering managers to achieve roadmap goals
• Perform security reviews, audits, assessments, and remediation actions or reporting
• Engage in highly technical architecture feedback and design reviews
• Hands-on engagement with git, DevOps, and security tools to help bolster understanding with other technical teams
• Advise crucial GRC, technical, and policy to engineering leadership

Requirements:

• 2+ years leading or supervising security teams
• 2+ years of hands-on experience with AWS, Terraform, Helm, Kubernetes, or other generalized DevOps tooling
• 4+ years of experience in the security domain with technical expertise or contributions
• Track record of crafting, developing, and handling security projects
• Ability to develop policy, process, and procedures to apply to engineering organizations
• Detection and Response concepts with SIEM, EDR, Incident Management, IDS, and WAF like Cloudflare, Datadog, incident.io, etc
• Experience with Vuln Management, CICD Security, BugBounty
• Regulatory experience such as PCI, FEDRAMP, SOX, etc
• Knowledge of Authentication, RBAC, and IAM systems like Okta, AWS SSO, etc
• Experience with JIRA and Confluence
• Experience with Git
• Deep networking and threat modeling experience
• Experience with AST tools like GHAS, Snyk, or ArmorCode
• Experience with CrowdStrike platforms
• Deep experience with GitHub and GitHub security controls
• Hands-on experience with AWS EKS, Rancher, or other Kubernetes platforms