Senior Security Engineering Manager
Fullscript
What you'll do
- Set the Standard: You'll define and execute the long-term security roadmaps for product security, cloud architecture, and AI risk ensuring everything aligns with our company goals.
- Be a Key Partner: Work closely with the Director of Internal AI, product engineering, and other stakeholders to integrate security seamlessly into the business.
- Inspire and Grow: Lead, mentor, and develop a high-performing security team. That means regular 1-on-1s, smart OKRs, actionable feedback, and personalized growth plans.
- Champion Security: Drive a security-first mindset across the entire organization through continuous learning and promoting best practices.
- Incident Commander: Take the lead during high-severity security incidents, coordinating containment, and remediation across teams as well as communicating with key stakeholders.
- Level Up: Drive non-stop improvement with red/blue team exercises, security 'game days,' and automated security baked right into our CI/CD pipelines.
- Security by Design: Define secure coding standards, conduct necessary design reviews, and develop frameworks to manage risks tied to Generative AI and ML model deployment.
- Cloud Architecture: Design and secure our cloud environments (AWS, Azure). Focus on smart network segmentation, Infrastructure as Code (IaC) security, posture management, and efficient, cost-effective monitoring.
- Shift-Left Advocate: Champion security principles throughout the entire Software Development Lifecycle.
- Gatekeeper: Manage secrets, identity access, and ensure we stay compliant with vital standards like HIPAA, PCI-DSS, and SOC 2.
What you bring to the table:
- Experience: 8+ years in Security Engineering, Product Security, or Cloud Security, with 3+ years managing engineers.
- Scale: Demonstrated success owning and securing large-scale production systems in major cloud environments.
- Tech Stack: Deep expertise in cloud security, secure network design, monitoring/observability tools, and application security.
- The Fundamentals: A solid grasp of secure software supply chains, zero-trust networking, data privacy, and compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, HITRUST).
- Communication: Excellent ability to take complex security concepts and translate them into clear, actionable business outcomes for any audience.
- AI/ML Experience is a bonus.
What we can offer you:
- Generous PTO and competitive pay.
- Fullscript’s RRSP match program for financial health.
- Flexible benefits package and workplace wellness program.
- Training budget and company-wide learning initiatives.
- Discount on Fullscript catalog of products.
- Ability to work Wherever You Work Well
