Job Description
We are on the lookout for a Senior Manager, Infrastructure Security. In this pivotal role, you will lead the strategy for protecting our cloud and corporate environments by reducing real-world risk without slowing down the business. You will champion a "Secure by Design" philosophy, ensuring that security is a collaborative engineering challenge where automated guardrails and technical excellence enable our platform to scale rapidly and securely by default.
As a Senior Manager, you will build and lead a mission-oriented team of engineers, fostering a culture where technical excellence, automation, and professional growth are central to our operations. You will move away from reactive auditing, instead focusing on the engineering of non-negotiable technical gates that prevent misconfiguration at the source. Your leadership will be defined by the ability to co-design the "how" with Engineering and IT, co-authoring architectural blueprints that are technically viable and operationally frictionless. By driving the transition toward Security-as-Code and consistent enforcement across 100% of our assets, you will directly influence the resilience and velocity of the world’s leading local delivery platform.
1. Lead and Mentor a High-Performing Team: Champion a culture of technical excellence and professional growth, enabling the team to drive strategic infrastructure resilience and long-term career success.
2. Drive Infrastructure Security Maturity: Define the strategic roadmap for our core domains to ensure maximum risk reduction and operational efficiency across our global cloud and corporate infrastructure.
3. Engineering Ownership and Enablement: Partner with tech verticals to provide the tooling, visibility, and expertise required for Engineering to own their security outcomes.
4. Automate Preventive Guardrails: Replace reactive manual checkpoints with automated policy-as-code and admission controls to validate or reject changes before they reach production.
5. Standardize Global Security Baselines: Eliminate ad-hoc configurations by architecting unified, version controlled security standards across our entire cloud and corporate infrastructure.
6. Drive Vulnerability Governance: Architect scalable processes and automation to identify, prioritize, and remediate infrastructure risks, ensuring a measurable reduction in our attack surface.
Qualifications
7. Proven Engineering Leadership: You have a track record of building and leading high performing engineering teams in complex global environments.
8. Cloud Security Expertise: You possess deep technical knowledge of AWS and GCP security architectures including identity boundaries, network isolation, and resource hardening.
9. Security as Code Mindset: You are proficient in driving automation through Terraform, CloudFormation, or similar infrastructure as code tools to enforce security standards.
10. Modern Preventive Controls: You have experience implementing admission controllers and policy engines such as OPA, Gatekeeper, or Kyverno to automate production guardrails.
11. Strategic Risk Management: You can translate complex technical vulnerabilities into clear business risks and prioritize remediation efforts based on actual threat impact.
12. Collaborative Influence: You are an expert at partnering with SRE, DevOps, and Platform Engineering teams to co-design security solutions that enhance rather than hinder developer velocity.
13. Operational Excellence: You have experience architecting vulnerability management programs that leverage automation to handle patching and configuration drift at a massive scale.
Nice to have:
14. Large Scale Cloud Operations: Experience managing security consistency across a complex, multi-account environment within both AWS and GCP.
15. Security Compliance: Familiarity with implementing technical controls to meet industry standards such as SOC2, ISO 27001, or PCI DSS.
16. Advanced Certifications: Professional level credentials such as the AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP.