security engineering manager

Apple

The Apple Services Engineering (ASE) Security team is looking for an experienced manager to manage a team of security engineers focused on driving security maturity for all of ASE. As a Senior Security Engineering Manager, you will collaborate with developers, site reliability engineers, and security teams to protect ASE services and design a secure foundation for services at Apple. You will build and lead a team of security engineers, set strategy, and lead execution, ensuring our products and services are hardened against attackers. You will play a pivotal role in shaping our security posture, and ensuring the confidentiality, integrity, and availability of our systems and data. This role is both strategic and hands-on, requiring deep technical expertise, strong leadership, and a proven track record of managing and growing high-performing security teams. 
 
Description 
 
As a manager, you will partner closely with engineering leadership to align security priorities with business objectives, advocate for security improvements across the organization, and build scalable security programs that protect Apple's services and our users. You will balance hands-on technical leadership with people management, mentoring your team to deliver high-quality security reviews while fostering their professional growth. You will work cross-functionally with privacy, offensive security, and other security teams to ensure a cohesive security posture across Apple's internet-facing services and backend infrastructure. 
 
&quot;,&quot;responsibilities&quot;:&quot; 
 
Team Leadership: Lead, mentor, and grow a team of security engineers. Set goals, conduct performance reviews, and support professional development. 
 
Security Architecture: Drive the design and implementation of secure systems architecture across cloud, infrastructure, and application environments. 
 
Threat Modeling &amp; Security Discovery: Lead efforts in proactive threat assessments and security issue analysis at ASE scale 
 
Security Partner: Engineer solutions and processes to allow engineering teams to remediate security issues and integrate security controls 
 
Cross-Functional Collaboration: Serve as a trusted security advisor to engineering, product, and leadership teams. 
 
Preferred Qualifications 
 
Bachelors degree in Computer Science / Engineering with emphasis in security related fields (or equivalent experience) Certs like CISSP, OSCP, OSCE, OSEE, etc. 
 
Background in emerging technology security domains such as AI/ML security, privacy-preserving technologies, or zero-trust architectures, with ability to guide team members working in specialized or rapidly evolving security areas 
 
Minimum Qualifications 
 
10+ years of experience in security engineering conducting hands-on security reviews, threat modeling, security architecture, and risk assessment for large-scale distributed systems and cloud services, with 6+ years of people management experience leading teams of security engineers, including responsibility for hiring, performance management, career development, and building high-performing technical teams 
 
Proven track record of building and scaling security programs, including developing security review methodologies, establishing metrics-driven processes, and implementing automation to improve team efficiency and coverage 
 
Strong experience partnering with engineering leadership to influence security strategy, communicate risk effectively to technical and non-technical audiences, and drive adoption of security improvements across large engineering organizations 
 
Experience with cloud-native architectures and modern development practices, including knowledge of containerization, orchestration systems, CI/CD pipelines, infrastructure-as-code, and third-party cloud platforms (AWS, GCP, Azure, or AliCloud) 
 
Demonstrated ability to manage competing priorities and make strategic trade-offs, balancing security rigor with business velocity while maintaining high security standards for services impacting millions of users 
 
Excellent verbal and written communication skills, with the ability to translate complex security concepts for technical and non-technical audiences 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $188,200 and $325,500, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Senior Security Engineering Manager

Apple Information Security is seeking an experienced security engineering manager to lead the Vulnerability Response team across the United States and EMEIA regions. Apple's external perimeter spans thousands of services relied upon by billions of users worldwide, and this team is responsible for continuously identifying, analyzing, and remediating vulnerabilities across that surface. You will combine hands-on technical leadership with people management, overseeing programs that include subcomponents of Apple's bug bounty program, proactive vulnerability discovery, WAF rule development, emerging threat response, and custom security 
 
tooling. 
 
You will play a critical role in protecting Apple's services and customers by ensuring timely and thorough response to security risks, fostering engineering excellence, and driving strategic initiatives that strengthen Apple's overall security posture. This role is both strategic and operational, requiring deep technical expertise, strong leadership, and the ability to manage a geographically distributed team operating in a continuous response environment. 
 
Description 
 
As a manager on the Vulnerability Response team, you will lead the day-to-day operations of security engineers across the US and EMEIA regions, as well as oversee resources providing around-the-clock support. You will set team priorities, drive execution across multiple concurrent programs, and ensure operational continuity for a function that requires uninterrupted coverage. This includes direct participation in on-call escalation rotations, hands-on technical contributions such as penetration testing, variant analysis, security tool development, and strategic planning to evolve the team's capabilities over time. 
 
You will partner closely with teams across Apple to ensure coordinated and effective vulnerability response. You will represent the team in cross-functional forums, advocate for security improvements with engineering leadership, and contribute to the development of policies, processes, and tooling that scale the team's impact. You will also maintain the professional standards and reputation through oversight of researcher engagement, 
 
vulnerability adjudication, and program communications.&quot;,&quot;responsibilities&quot;:&quot;Team Leadership: Lead, mentor, and grow a geographically distributed team of security engineers across the US and EMEIA regions. Set goals, support professional development, and oversee resources providing around-the-clock Tier 1 support. 
 
Vulnerability Response Operations: Own the team's continuous vulnerability response function, including on-call escalation, emerging threat and zero-day assessment, and coordination of rapid remediation efforts across Apple's external perimeter. 
 
Vulnerability Discovery and Remediation: Drive proactive security assessment programs, including penetration testing, variant analysis, and large-scale scanning initiatives, to identify and remediate vulnerabilities before they are discovered or exploited by external parties. 
 
Security Program Management: Manage the lifecycle of external researcher engagement, report validation, risk assessment, and remediation coordination. 
 
Security Tooling and Automation: Guide the development and maintenance of custom security tools and automation that support vulnerability detection, analysis, and remediation tracking at scale, including the application of emerging technologies to increase operational efficiency. 
 
Cross-Functional Collaboration: Serve as a trusted security advisor to engineering, product, and leadership teams, partnering across security and infrastructure organizations to align vulnerability response priorities with broader security objectives and drive adoption of security improvements. 
 
Preferred Qualifications 
 
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience. 
 
Experience with cloud-native architectures, WAF technologies, and DNS security disciplines, with the ability to assess security implications across modern deployment and infrastructure environments. 
 
Background in applying AI and machine learning techniques to security operations, including automated analysis, classification, or remediation workflows. 
 
Relevant industry certifications such as CISSP, OSCP, OSCE, GPEN, or equivalent are helpful but not required. 
 
Minimum Qualifications 
 
8+ years of experience in information security, with demonstrated expertise in vulnerability management, web application penetration testing, and incident response for large-scale internet-facing services, including 3+ years of people management experience leading and developing teams of security engineers. 
 
Strong technical proficiency in web application security, including hands-on experience identifying and remediating common vulnerability classes, and software development skills in one or more of Python, Go, or Bash. 
 
Experience managing or contributing to a vulnerability disclosure or bug bounty program, including researcher engagement, vulnerability validation, and coordinated disclosure processes. 
 
Experience with vulnerability scanning tools and methodologies at enterprise scale, including both commercial and open-source solutions. 
 
Demonstrated ability to manage geographically distributed teams across multiple time zones, with willingness to participate in on-call rotations, including weekends, as part of a tiered escalation model. 
 
Excellent written and verbal communication skills, with the ability to articulate complex security issues and risk to both technical and non-technical audiences. 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $208,400 and $313,500, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Service Delivery Manager - Apple Information Security

Embedded within Apple&rsquo;s Security Engineering &amp; Architecture organization, the Data Protection team&rsquo;s mission is to keep our customer&rsquo;s on-device content secure even when lost, stolen, or confiscated. We are seeking an experienced security engineering manager to lead this team of talented engineers responsible for designing, developing, and maintaining Data Protection technologies while balancing security, performance, and usability. 
 
These technologies comprise content encryption at rest, passcode security, software attestation, key management, boot security, and more. They span from system-on-a-chip and accessory hardware through Secure Enclave, kernel, and userland software. The team works closely with other engineering teams across Apple to ensure seamless integration of Data Protection into all of our products: Mac, iPhone, iPad, Apple Watch, Apple TV, Vision Pro. 
 
We design and secure software for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. We challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use. Not many jobs can offer all of these things. Security engineering jobs at Apple do, and much more. 
 
Description 
 
As the leader of this team, you will push Data Protection technologies to the next level. You will: 
 
Work with cross-functional teams across Silicon Engineering, Software Engineering, and Product Management, to define and implement security solutions that balance competing factors such as ease of use, performance, and of course security. 
 
Collaborate with our Silicon Engineering group on new hardware and products. 
 
Create practices that set new benchmarks in software assurance. 
 
Transform the developer experience to ensure the application of the highest content protection possible. 
 
Anticipate and stay ahead of evolving threats and vulnerabilities. 
 
Build robust recovery mechanisms that safeguard customer data. 
 
Encourage and guide your team members to reach their full potential in impact, influence, and long-term career success. 
 
Preferred Qualifications 
 
Strong understanding of operating systems internals, and experience with systems programming 
 
Strong understanding of applied cryptography, access control, and other security mechanisms 
 
Programming background, in C, C++, Objective-C, and/or Swift 
 
An understanding of past, current, and emerging security exploit trends 
 
Minimum Qualifications 
 
5+ years leading security/software teams 
 
Excellent skills for coaching team members and fostering partnerships across organizational boundaries 
 
Track record of shipping pragmatic security technologies in customer-facing services or products 
 
Highly professional attitude, with the ability to deliver solid work on tight schedules with a high bar for quality 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $198,300 and $342,800, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Software Engineering Manager, Security

Apple Services Engineering (ASE) team is one of the most exciting examples of Apple&rsquo;s long-held passion for combining art and technology! We enable Apple&rsquo;s apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries. Within ASE you will work with and influence colleagues across Apple to implement new features and ensure security continues to be at the forefront of our software and development processes. As our work is integral through the entire software stack, you will have the opportunity to work with a wide variety of engineering teams across Apple. We cultivate strong relationships, build trust, and influence without direct authority. We communicate openly and clearly, collaborate enthusiastically, and value a diverse culture of healthy debate. Do these points resonate with you? If so, we want to talk! 
 
Description 
 
As a Security Engineering Program Manager in ASE, you are both a technical and functional expert in the world of securing enterprise servers and services at scale. While working directly with ASE security and engineering teams, you&rsquo;ll identify opportunities to improve our project security posture. This will include building tools, driving process improvements, and working with service owners to develop innovative solutions to complex technical challenges. You will be responsible to identify, plan and deliver program security outcomes by independently engaging a broad set of internal and external stakeholders.&quot;,&quot;responsibilities&quot;:&quot;Operationalize key cross-functional security initiatives and programs that require security domain, systems and engineering level knowledge. 
 
Manage cross functional dependencies, risks, and changes effectively by optimizing scope, schedule, and resources accordingly. 
 
Create project plans which deliver consistency, clarity and build alignment across teams. 
 
Play a key part in shaping the technical design, predicting technical roadblocks by collaborating with engineers, and identifying trade-offs between usability and security. 
 
Help influence peers / stakeholders and build consensus while dealing with ambiguity. 
 
Develop and own communication plans to effectively and proactively communicate program status, issues, and risks to stakeholders. 
 
Define and report on program health, success metrics and active progress. 
 
Leverage data to drive strategic decisions and prioritization at the leadership level. 
 
Partner with engineering teams to adopt security features to improve the security posture of Apple globally. 
 
Preferred Qualifications 
 
Knowledge of security architecture, threat modeling and secure design principles. 
 
Experience with cloud security. 
 
Able to think critically and creatively, identify risks and drive the execution across multiple teams to remediate them. 
 
Able to focus and simplify, balancing the details with goals, priorities, and trade-offs in mind. 
 
Outstanding verbal and written communication skills. 
 
Minimum Qualifications 
 
5+ years of experience managing projects or programs in the field of security. 
 
Background in technical program management. 
 
Experience managing projects across cross functional teams, building sustainable processes and coordinating release schedules. 
 
Familiarity in at least one of the following areas: security review, adversarial and/or collaborative testing, detection and response, or vulnerability management. 
 
BS in Computer Science, Computer Engineering, or related field or relevant industry experience 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $163,300 and $290,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Sr. Engineering Program Manager, Security, Apple Services Engineering

DICK'S Sporting Goods

<div>At DICK&rsquo;S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.
If you are ready to make a difference as part of the world&rsquo;s greatest sports team, apply to join our team today!
OVERVIEW:<div><div>
The Manager, Cybersecurity Engineering - Data and AI will drive strategic support, engineering, and operations of critical cybersecurity technologies covering data protection and governance controls (including data loss prevention), and security capabilities for AI-enabled endpoints, agents, and applications to assure the security posture of the organization&rsquo;s networks and endpoint systems, all while acting as a security liaison to business and technology stakeholders. Inclusive of the core technology engineering work will be facilitating the audit, reporting, monitoring, and analytics involved with the overarching Data and AI capabilities. This role requires the ability to translate the technology risk requirements and constraints of the business into technical control requirements and specifications, as well as develop metrics for ongoing performance measurement and reporting. The role coordinates the technology organization's technical activities to consult and assure the security posture of the organization via Data and AI infrastructure while providing regular status and service-level reports to management.</div><div> 
An individual with a strong technical background is required, as well as an ability to work with the technology organization and business management to align priorities and plans with key business objectives. The role will be involved in technology planning initiatives to ensure that security measures are incorporated into strategic technology plans and that service expectations are clearly defined. The role will also be responsible for working with business and technology stakeholders to balance real-world risks with business drivers such as speed, agility, flexibility and performance. Expertise in leading project teams and developing and managing projects is essential for success in this role. As well as the ability to prioritize work efforts &mdash; balancing operational tasks with longer-term strategic security efforts. Other project management tasks will include resource balancing within the team, resource asks from other teams, task prioritizing, and project reporting. Vendor relationship management &mdash; ensuring that service levels and vendor obligations are met &mdash; is also an important aspect of the position.</div><div> 
The role is also responsible for managing highly technical staff as they work to accomplish company and personal development goals and must, therefore, have proven leadership skills. Documentation and presentation skills, analytical and critical thinking skills, and the ability to identify needs and take initiative are key requirements of the position. Technology personnel responsible for managing technical security infrastructure may report directly to the role or may report to other areas of Technology (for example, networking, servers or database management), with their security-related activities coordinated by the role.</div><div> 
Strategy and People Leadership:</div><div>
Work with the Cybersecurity and Digital Trust Team to develop a security program and security projects that address identified risks and business security requirements. Manage the process of gathering, analyzing, and assessing the current and future threat landscape to provide a realistic overview of risks and threats in the enterprise environment. Develop budget projections based on short- and long-term goals and objectives. Monitor and report on compliance with security policies, as well as the enforcement of policies within the technology department. Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance. Lead a team of information security professionals, hire and train new staff, conduct performance reviews, and provide leadership and coaching, including technical and personal development programs for team members.</div><div>
Security Liaison:</div><div>
Assist resource owners and technology staff in understanding and responding to security audit failures reported by auditors. Provide security communication and awareness for audiences, which may range from senior leaders to field staff. Work as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service-level agreements. Manage production issues and incidents and participate in problem and change management forums. Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation. Serve as an active and consistent participant in the information security governance process. Work with the technology and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program. Provide support for legal and regulatory compliance efforts, including audit support.</div><div>
Security Engineering:</div><div>
Consult with technology and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software. Recommend and coordinate the implementation of technical controls to support and enforce defined security policies. Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools. Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with technology management to align existing technical installed base and skills with future architectural requirements. Develop a strong working relationship with the security engineering team to develop and implement controls and configurations aligned with security policies and legal, regulatory, and audit requirements.</div><div>
Operational Support:</div><div>
Coordinate, measure and report on the technical aspects of security management. Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements. Support operational components of incident management, including detection, response and reporting. Contribute to a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices. Contribute to the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk. Manage security projects and provide expert guidance on security matters for other technology projects. Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans. Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Design, coordinate and oversee security testing procedures to verify the security of networks and endpoint systems, and manage the remediation of identified risks.</div><div> 
PREFERRED QUALIFICATIONS:</div><div><ul><li>
CISM (preferred not required)</li></ul></div><div><ul><li>
CISSP (preferred not required)</li></ul></div><div><ul><li>
Operating Systems such as Windows and Linux - Data security and data loss prevention (DLP) familiarity across: data classification and labeling, policy authoring and tuning, endpoint and cloud/app coverage, data discovery, encryption and key management concepts, incident triage/response workflows, reporting/metrics, and integration with compliance, legal, and privacy processes.</li></ul></div></div><div><div><ul><li>
Understanding of web security standards, architecture, web security best practices and application security best practices - Experience implementing and operating security capabilities for AI-enabled endpoints, agents, and applications (including protections against data exfiltration and unsafe content), such as prompt and input/output controls, content safety, sensitive data detection, and alerting/telemetry (e.g., AIDR and Prompt Shield or equivalent capabilities).</li></ul></div><div><ul><li>
Cloud security - Strong understanding of security engineering foundations that support Data and AI controls, including secure configuration and hardening, secrets management, API integrations, logging/monitoring (SIEM), automation (SOAR), and SDLC/CI-CD integration; ability to partner with Vulnerability Management and AppSec teams to remediate findings and improve control effectiveness.</li></ul></div><div><ul><li>
Strong understanding and implementation of Technology best practices, policies and procedures</li></ul></div><div><ul><li>
Assessing risk and business impact of technical changes to our environment</li></ul></div><div><ul><li>
Proactively identifying and evaluating problems, determine root cause</li></ul></div><div><ul><li>
Public and private cloud engineering and strategic view of cost-effective hosting</li></ul></div><div><ul><li>
Translating a service interruption into an impact analysis and execute a corrective plan of action</li></ul></div><div><ul><li>
Contract negotiations, vendor management, project management and financial management</li></ul></div><div><ul><li>
Effective leadership and management during crisis</li></ul></div><div><ul><li>
Ability to effectively plan, organize, schedule and coordinate among competing priorities across multiple entities</li></ul></div><div><ul><li>
Ability to effectively communicate complex technical issues.</li></ul></div><div><ul><li>
Good interpersonal skills with staff, end-users, peers, management, and vendors</li></ul></div><div><ul><li>
A strong understanding of the business impact of security tools, technologies and policies</li></ul></div><div><ul><li>
In-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls; an excellent understanding of information security concepts, protocols, industry best practices and strategies</li></ul></div><div><ul><li>
Experience working with legal, audit and compliance staff</li></ul></div><div><ul><li>
Experience developing and maintaining policies, procedures, standards and guidelines</li></ul></div><div><ul><li>
An understanding of operating system internals and network protocols</li></ul></div><div><ul><li>
Familiarity with the principles of cryptography and cryptanalysis</li></ul></div><div><ul><li>
Experience managing and delivering enterprise DLP programs across email, endpoints, collaboration tools, and cloud applications</li></ul></div><div><ul><li>
Experience implementing and tuning DLP policies that balance risk reduction with user experience and business productivity</li></ul></div></div><div><div><ul><li>
Working knowledge of data classification, labeling, and information protection concepts and how they operationalize across platforms</li></ul></div><div><ul><li>
Experience leading teams responsible for data protection operations, including alert triage, investigations, and escalation workflows</li></ul></div><div><ul><li>
Familiarity with integrating DLP signals into SIEM/SOAR platforms to support incident response and automation</li></ul></div><div><ul><li>
Experience supporting or securing AI-enabled tools and services used by the business (e.g., Copilot, internal AI tools, third-party AI SaaS)</li></ul></div><div><ul><li>
Understanding of AI data risks, including prompt-based data exposure, unintended outputs, and sensitive data leakage</li></ul></div><div><ul><li>
Experience applying data protection and DLP controls to AI usage to reduce the risk of sensitive data exposure</li></ul></div><div><ul><li>
Understanding of how Responsible AI principles intersect with security, privacy, and data protection</li></ul></div><div><ul><li>
Ability to lead teams through change management as AI capabilities and controls evolve</li></ul></div></div> 
QUALIFICATIONS:<div><ul><li>
Bachelor's Degree or equivalent experience in management information systems, computer science, information security/cybersecurity or equivalent experience</li></ul></div><div><ul><li>
3-5 years experience in Identity and access management, security threat detection and risk management, technology controls, security frameworks, DevSecOps, staff mentorship &amp; development</li></ul></div><ul><li>
CISM (preferred)</li><li>
CISSP (preferred)</li></ul>
#LI-CB1
VIRTUAL REQUIREMENTS:
At DICK&rsquo;S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.
To ensure a smooth and secure experience, please note the following:<ul><li>
Cameras must be on during all virtual interviews.</li><li>
AI tools are not permitted to be used by the candidate during any part of the interview process.</li><li>
Offers are contingent upon a satisfactory background check which may include ID verification.</li></ul>
If you have any questions or need accommodations, we&rsquo;re here to help. Thanks for helping us keep the process fair and secure for everyone! 

Targeted Pay Range: $95,200.00 - $158,800.00. This is part of a competitive total rewards package that could include other components such as: incentive, equity and benefits. Individual pay is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all teammate pay regularly to ensure competitive and equitable pay.DICK'S Sporting Goods complies with all state paid leave requirements. We also offer a generous suite of benefits. To learn more, visit www.benefityourliferesources.com.</div>

Manager Cybersecurity Engineering - Data & AI (REMOTE)

Brown University

<div>Job Description:
Director, Information Security
Office of Information Technology
Brown University
The Director of Information Security in the Office of Information Technology (OIT) is a senior leadership role within Brown University&rsquo;s Information Security Group (ISG). Reporting to the Chief Information Security Officer (CISO), the Director provides strategic and operational oversight for three critical pillars of the University&rsquo;s cybersecurity program: Security Engineering, Security Operations, and Information Compliance &amp; Risk.
The Director provides critical operational continuity in the CISO&rsquo;s absence. This role is responsible for translating institutional vision into actionable plans, ensuring that Brown&rsquo;s digital assets are protected through robust engineering, that security incidents are managed with precision, and that the University maintains a rigorous posture regarding IT risk and regulatory compliance.
Acting as a key liaison between technical practitioners, University leadership, and administrative departments (including the Office of General Counsel and Brown Risk, Audit, and Compliance teams), the Director fosters a culture of continuous improvement and proactive risk management.
This role has technical subject matter expertise and management duties. They may be alerted for unplanned escalation or backup support at any time. They are expected to respond to alerts as appropriate.
Occasional travel to the Providence, RI campus is required for on-site leadership meetings or incident management.
Qualifications:
Education and Experience<ul><li>
Bachelor's Degree required.</li><li>
10+ years of combined IT and IT security experience, with at least 3 years in a significant leadership role.</li><li>
Proven management experience providing strategic oversight and mentorship to multidisciplinary technical teams, ensuring alignment between departmental goals and high-performance execution.</li><li>
Experience with security operations, incident response, and security engineering.</li><li>
Knowledge of privacy regulations (e.g., GDPR, CCPA, FERPA, HIPAA) preferred.</li><li>
Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.</li><li>
Experience with vulnerability management, and security architecture.</li><li>
Experience with cloud security (e.g. Azure, GCP, and AWS) preferred.</li></ul>
Job Competencies<ul><li>
Strong leadership and team-building skills.</li><li>
Ability to manage multiple priorities in a dynamic environment.</li><li>
Excellent verbal and written communication skills.</li><li>
Strong analytical and problem-solving abilities.</li><li>
Knowledge of compliance frameworks and regulatory requirements (e.g. NIST 800-171 and PCI DSS).</li><li>
Ability to work effectively with diverse stakeholders across the institution</li></ul>
A criminal background check and education verification is required. In addition to completing a Criminal Justice Information Services (CJIS).
Benefits of Working at Brown:
Information on the Benefits of Working at Brown can be found here.
Recruiting Start Date:
2026-04-07
Job Posting Title:
Director, Information Security
Department:
Office of Information Technology
Grade:
Grade 13
Worker Type:
Employee
Worker Sub-Type:
Regular
Time Type:
Full time
Scheduled Weekly Hours:
37.5
Position Work Location:
Remote 
Submission Guidelines:
Please note that in order to be considered an applicant for any staff position at Brown University you must submit an application form for each position for which you believe you are qualified. Applications are not kept on file for future positions. Please include a cover letter and resume with each position application.
This position is not eligible for visa sponsorship.
Still Have Questions?
If you have any questions you may contact employment@brown.edu.
Brown is an E-Verify Employer.
EEO Statement:
Brown University provides equal opportunity and prohibits discrimination, harassment and retaliation based upon a person&rsquo;s race, color, religion, sex, age, national or ethnic origin, disability, veteran status, sexual orientation, gender identity, gender expression, or any other characteristic protected under applicable law, in the administration of its policies, programs, and activities. The University recognizes and rewards individuals on the basis of qualifications and performance. The University maintains certain affirmative action programs in compliance with applicable law.</div>

Director, Information Security

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
Amazon Enterprise Security Products (AESP) is a team bringing security products to the market at scale. We architects and builds security tooling that is cloud agnostic, meeting our customers where their data is. As an engineering leader, you will have direct impact on the experience customers and their security efforts through helping building the next generation of AI powered security tooling. We're seeking a seasoned technology leader. 
 
You'll lead a specialized tech teams building and securing security products at scale. This charter extends beyond Amazon native services: you'll lead security efforts that are cloud agnostic, meeting our customers where their data is. If this sounds like you, our team is looking for a senior leader who will be responsible for leading, developing and taking security efforts to the next level. You will be responsible for the security risk posture for new product lines, while enabling the organization to deliver a great and secure experience for our customers. In this role, you will define security requirements, build processes and mechanisms that continue to raise the security bar for Amazon&rsquo;s enterprise security products, and develop scalable solutions that meet the business and customer needs. This role will require innovation, as well as the ability to perform security at scale across cloud providers while leading and motivating a team of skilled security engineers. 
 
Key job responsibilities 
As a leader in the team, you will be tasked in setting and executing the security strategic direction for various enterprise services. You will be responsible for leading a multi-functionally team. You will partner with engineering teams to integrate scalable security tools and controls into everyday work for the entire organization. You will help envision, drive, and scale the programs through innovative process changes across multiple organizations and teams, engaging technical and non-technical people throughout the organization. You will partner and work across disciplines and executives including engineering, marketing, product management, legal, and business. Above all, you feel strongly about protecting customers. Your focus will be to help teams design their systems and customer experiences in a manner that upholds our high bar for customer trust 
 
About the team 
About Amazon Security 
 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>10+ years of industry work with hands-on security engineering experience</li><li>10+ years of team management and building (including coaching and mentoring) experience</li><li>Bachelor's degree in Computer Science or a related field</li><li>Experience communicating technical concepts to a non-technical audience</li><li>Experience in risk assessment and enabling organizations to make security decisions</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of information security risk-based prioritization</li><li>Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques</li><li>Experience applying threat modeling or other risk identification techniques or equivalent</li><li>Experience architecting, securing, and operating Amazon Web Services</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, TX, Austin - 208,300.00 - 281,800.00 USD annually 
USA, WA, Seattle - 208,300.00 - 281,800.00 USD annually</div>

Sr. Manager, Security Engineering, Enterprise Security Products

Search 10000+ Security engineering manager jobs near you this April. New roles added regularly across leading industries. Apply today.