Product Security Engineering Manager

Responsibilities

• ▹Lead, grow and empower a team of product security engineers, fostering excellence and psychological safety
• ▹Own and evolve the secure SDLC: drive 'shift-left' initiatives across architecture reviews, threat modeling, SAST/DAST, continuous testing and fuzzing
• ▹Design and launch a Security Foundations program focused on secure-by-default engineering
• ▹Own the security roadmap and day-to-day operations of the FedRAMP program

Requirements

• ▹7+ years of experience in cybersecurity with a focus on Product, Application, or Platform Security
• ▹2+ years directly managing and mentoring a team of security engineers
• ▹Demonstrable experience driving sustained improvement across complex, multi-team projects
• ▹Excellent communication and ability to build strong partnerships with engineering, DevOps and product teams
• ▹Hands-on experience integrating security into CI/CD: threat modeling, architecture reviews, SAST/DAST/SCA/fuzzing
• ▹Fluency in at least one modern programming language (Python, Go, Ruby, Java)
• ▹Strong understanding of cloud-native architectures (AWS, GCP, Azure), containerization (Kubernetes, Docker) and Infrastructure as Code (Terraform)
• ▹Practical experience supporting compliance frameworks (FedRAMP, PCI, SOC2, ISO27001, NIST 800-53)

Nice to have

• ▹Experience managing, triaging, or participating in Bug Bounty programs
• ▹Background building 'paved roads' or secure-by-default internal libraries
• ▹Experience in a fast-paced, high-growth security or SaaS company

Soft skills

What we offer

• ▹Base pay range: $176,000–$242,000 (US national average)
• ▹Eligible for discretionary bonus or commission plan

About the company

Bugcrowd has run a crowdsourced cybersecurity platform since 2012, connecting a global network of ethical hackers with its AI-powered Security Knowledge Platform (CrowdMatch™). Headquartered in San Francisco and New Hampshire, it is backed by General Catalyst, Rally Ventures, and Costanoa Ventures.