Security Engineering Manager

SkySlope is hiring a Security Engineering Manager to build and lead its security engineering team and establish the company’s security engineering program. The role combines hands-on technical leadership with responsibility for the security roadmap, team development, cross-organizational partnerships, and AI governance.

Responsibilities:

• Responsible for designing and executing SkySlope's security engineering program
• Own the security roadmap across its major domains: identity and credential standards (short-lived, machine-identity-based credentials and OIDC federation), least-privilege authorization, secrets management, managed-device standards, attack-surface governance, secure SDLC (commit signing and org-wide SAST, dependency and secret scanning), centralized logging and detection, vulnerability disclosure, and AI governance
• Sequence and prioritize the program pragmatically, targeting the highest risk reduction per unit of engineering effort first
• Own the security-debt register: maintain security work as a visible, prioritized engineering backlog rather than an audit artifact
• Own security tooling and vendor decisions, including evaluation, selection, and build-vs-buy judgment
• Deliver clear, honest executive reporting on program status, risk posture, and progress
• Responsible for hands-on technical leadership (player-coach)
• Lead and participate directly in architecture and design reviews for security-relevant work
• Contribute hands-on where it matters most: proofs of concept, detection logic, automation, and reviews
• Set and uphold the technical bar for security engineering work across the team
• Responsible for hiring and growing the security team
• Hire security engineers across levels and build an effective, collaborative team
• Coach and mentor each direct report through personal and performance management, including growing an early-career engineer into a strong contributor
• Build a team culture where security work is engineering work: shipped, measured, and iterated
• Responsible for partnering across the organization
• Work with DevOps, IT, and product engineering teams to embed security standards into how work already gets done — paved roads over gates
• Communicate early and often, building trust between security and the rest of engineering
• Ensure security guidance is concrete and actionable, not theoretical
• Responsible for making AI a security force multiplier
• Apply AI tooling to security review, triage, and detection engineering, and define the guardrails under which it operates
• Shape SkySlope's AI governance standards in partnership with engineering leadership

Requirements:

• Strong senior/staff-level individual contributor background in security engineering, infrastructure engineering, or platform engineering; you have personally built the kinds of systems you will now lead
• Demonstrated ability to design and drive a security program or comparable cross-cutting technical initiative from ambiguity to delivery
• Working depth in modern cloud security practice: cloud IAM, credential federation, secrets management, secure SDLC, and detection/logging (we run multi-cloud: primarily AWS, a growing GCP footprint, and a small amount of Azure; depth in one cloud and fluency across the rest is fine)
• Strong coaching and mentoring skills, with a track record of growing engineers, including those early in their careers
• Sound judgment on tooling and vendor decisions, including knowing when to build and when to buy
• Clear, direct communicator with executives and with engineers, in writing and in person
• Enthusiasm for using AI as a working tool in security engineering; we want practitioners who are energized by this, not skeptical of it
• Pragmatism: bias toward risk reduction that ships over frameworks that impress