Key skills

Security EngineeringAWSTerraformHelmKubernetesSecurity Information and Event Management (SIEM)Endpoint Detection and Response (EDR)Incident ManagementIntrusion Detection Systems (IDS)Web Application Firewall (WAF)Vulnerability ManagementCI/CD SecurityPCI ComplianceIdentity and Access Management (IAM)Role-Based Access Control (RBAC)GitJiraConfluenceEKSRancherIAMOktaSSODatadogGitHubCloudflareLeadershipCollaborationSnykWAF

About this role

Reverb is an online marketplace dedicated to buying and selling new, used, and vintage musical instruments. The company is seeking a Security Engineering Manager to lead its Security Engineering team in designing and building secure systems and practices for its e-commerce platform. The role oversees security professionals, security planning and assessments, architecture reviews, and collaboration with engineering leadership.

Responsibilities:

Day-to-day management of security engineers and analysts at Reverb
Security sprint planning and retrospectives
Collaborate with other engineering managers to achieve roadmap goals
Perform security reviews, audits, assessments, and remediation actions or reporting
Engage in highly technical architecture feedback and design reviews
Hands-on engagement with git, DevOps, and security tools to help bolster understanding with other technical teams
Advise crucial GRC, technical, and policy to engineering leadership

Requirements:

2+ years leading or supervising security teams
2+ years of hands-on experience with AWS, Terraform, Helm, Kubernetes, or other generalized DevOps tooling
4+ years of experience in the security domain with technical expertise or contributions
Track record of crafting, developing, and handling security projects
Ability to develop policy, process, and procedures to apply to engineering organizations
Detection and Response concepts with SIEM, EDR, Incident Management, IDS, and WAF like Cloudflare, Datadog, incident.io, etc
Experience with Vuln Management, CICD Security, BugBounty
Regulatory experience such as PCI, FEDRAMP, SOX, etc
Knowledge of Authentication, RBAC, and IAM systems like Okta, AWS SSO, etc
Experience with JIRA and Confluence
Experience with Git
Deep networking and threat modeling experience
Experience with AST tools like GHAS, Snyk, or ArmorCode
Experience with CrowdStrike platforms
Deep experience with GitHub and GitHub security controls
Hands-on experience with AWS EKS, Rancher, or other Kubernetes platforms