Senior Manager, Product Security

Tines · United States · по договорённости

Компания
Tines
Город
United States
Зарплата
по договорённости
Уровень
senior
Формат
удалённо
Удалённо
да
Иностранная компания
нанимает русскоязычных

Tines is the intelligent workflow company that powers some of the world's most important workflows.

Tines has been supporting IT and security teams from a diverse range of customers, including Canva, Reddit, SAP, Coinbase, Mars, Fin (Intercom), and McKesson.

Tines 3B, launched in 2026, is the next generation of Tines – a single, secure environment for every team’s apps, agents and automations.

As an integrator across the entire tech stack, Tines is vendor-agnostic integrating with any API-enabled service. This flexibility enables our customers to achieve their highest-priority goals faster. Tines has security woven into its DNA, and our platform is secure and private by design.

At Tines, we're driven by our values of Simplicity, Speed, and Soundness. We're committed to delivering exceptional customer experiences while fostering a company culture that nurtures individual curiosity, growth, and integrity. We’re excited about what’s next, and we’re looking for others to join us on our journey.

We're seeking a Senior Manager, Product Security to lead and scale our product security program in an AI-forward engineering environment. Reporting to our Head of IT Operations & Information Security, you’ll be responsible for setting the direction of product security, developing a high-performing team, and partnering with engineering and product leaders to ensure security keeps pace with our growth.

This is a hands-on leadership role for someone who can move fluidly between strategy, people management, and technical execution. You’ll establish priorities based on risk, create scalable security processes and guardrails, and help teams make sound security decisions without introducing unnecessary friction.

A core part of this role is using AI and automation as force multipliers, building a product security program that can match the velocity of AI-assisted development while addressing the risks introduced by AI-powered products, agentic systems, and rapidly evolving engineering practices.

This position can be based remotely in the United States.

Key Responsibilities

Product Security Strategy : Define and execute the product security strategy, roadmap, operating model, and success metrics in alignment with company objectives and product risk.

Team Leadership : Hire, manage, mentor, and develop product security engineers, creating a culture of technical excellence, accountability, curiosity, and sustainable execution.

Cross-Functional Partnership : Build strong relationships with engineering, product, infrastructure, legal, compliance, and executive stakeholders. Influence product and architectural decisions through clear, risk-based guidance.

Secure Product Development : Establish scalable security practices throughout the software development lifecycle, including security requirements, architecture reviews, threat modeling, testing, and remediation.

AI-Augmented Security : Use AI and automation to expand product security coverage and reduce manual toil, including automated review, vulnerability triage, risk identification, and agentic security workflows.

AI Product Security : Partner with product and engineering teams to identify and mitigate risks in AI-powered features and systems, including prompt injection, data leakage, model abuse, excessive agency, and insecure tool use.

Security Architecture : Guide the design and implementation of secure architectures and platform controls that support a growing portfolio of cloud-native, multi-tenant products.

Risk Management and Prioritization : Develop a consistent framework for identifying, communicating, prioritizing, and accepting product security risks. Ensure engineering effort is focused on the issues that matter most.

Vulnerability Management : Own the product vulnerability management lifecycle, including internal findings, customer reports, penetration tests, vulnerability disclosure, and bug bounty submissions. Drive timely, risk-based remediation.

Открыть и откликнуться →

Отклик ведёт на сайт работодателя. Бесплатная регистрация открывает отклик и разбор резюме.

Многих вакансий каталога нет на агрегаторах

9400+ вакансий от 1600+ компаний — в основном напрямую с карьерных сайтов и из Telegram-каналов. У 850+ из них есть контакт нанимающего: пишешь человеку, а не в общую очередь. Регистрация бесплатная — откроет контакты и подбор вакансий под твоё резюме.