Sr. Manager, Security Engineering

Overview

Lead the security engineering organization protecting 6sense's AI-enabled, cloud-native SaaS platform, owning Vulnerability Operations, Infrastructure Security, and Application/Product Security across distributed teams in the United States and India.

What you'll do

• Lead, coach, and develop managers and engineers across the United States and India, establishing role clarity, career paths, succession coverage, and consistent performance expectations.
• Build one integrated security engineering operating model across the three teams, with clear ownership, service expectations, priorities, and measurable outcomes.
• Build workforce and capacity plans aligned to product growth, AI investment, risk, and business priorities.
• Own the security strategy for AI-enabled product capabilities from design through production, including threat modeling, architecture review, secure development standards, testing, monitoring, and release readiness.
• Address AI-specific risks such as prompt injection, insecure tool or agent access, sensitive-data exposure, model and data pipeline integrity, excessive agency, abuse, and third-party model or service dependencies.
• Partner with AI/ML, Product, and Engineering teams to define secure patterns for models, agents, retrieval-augmented generation, application programming interfaces, data access, and human approval controls.
• Advance product security practices including secure software development lifecycle controls, code and design review, application security testing, penetration testing, security champions, and coordinated vulnerability disclosure or bug bounty.
• Own end-to-end vulnerability discovery, prioritization, remediation governance, exception management, and validation across applications, cloud infrastructure, containers, endpoints, operating systems, and third-party components.
• Prioritize vulnerabilities by exploitability, internet exposure, asset criticality, data sensitivity, available compensating controls, and active threat intelligence, not severity alone.
• Establish coverage for software supply chain risk, including open-source dependencies, build systems, artifacts, secrets, and continuous integration and delivery pipelines.
• Own preventive and detective security guardrails for the AWS environment, infrastructure as code, containers, identity and access, network boundaries, workloads, secrets, logging, and data services.
• Drive least privilege, secure administrative access, workload identity, segmentation, configuration assurance, and continuous cloud risk reduction.
• Translate business strategy, product roadmaps, AI priorities, threat trends, customer commitments, and audit requirements into a multi-quarter security engineering roadmap with quarterly objectives, key results, and risk indicators.
• Communicate risk and tradeoffs clearly to technical leaders and executives, escalating material risks with practical options, owners, and recommended decisions.
• Maintain policies, standards, control evidence, inventories, and operating procedures supporting SOC 2, ISO 27001, privacy, customer assurance, and other applicable obligations.
• Evaluate and rationalize security tools and services based on measurable risk reduction, engineer experience, coverage, integration, and total cost.

What you'll need

• 8+ years in information security, including significant experience in product or application security, cloud security, vulnerability management, or security engineering.
• 3+ years leading security engineering teams, including experience managing distributed or cross-region teams.
• Demonstrated ability to build and mature security programs in a cloud-native SaaS environment, preferably on AWS.
• Practical experience securing modern software delivery, including secure development lifecycle practices, application security testing, cloud-native infrastructure, containers, infrastructure as code, software supply chain, and vulnerability operations.
• Working knowledge of AI and machine learning security risks and controls.
• Ability to evaluate technical risk, make sound tradeoffs, and convert strategy into clear roadmaps, operating mechanisms, and measurable outcomes.
• Strong executive and technical communication skills, including the ability to explain complex risk in plain language and influence without relying on authority.
• Knowledge of relevant practices and frameworks such as NIST Secure Software Development Framework, OWASP, OWASP guidance for large language model applications, MITRE ATLAS, CIS Benchmarks, NIST 800-53, SOC 2, and ISO 27001.

Nice to have

• Experience leading managers.
• Experience securing large language model, agentic, or retrieval-augmented generation features.
• Bachelor's degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
• Relevant certification such as CISSP, CISM, GIAC, or an advanced cloud security certification.
• Experience in a high-growth business-to-business SaaS company and in customer-facing security assurance.

Details

• Location: United States, Remote; team model spans the United States and India.
• Base salary range: $204,721.50 - $254,258.20, plus other compensation that may include a bonus program or commission plan and stock options if approved by 6sense's board.