Information Security Manager

Attentive® is the AI marketing platform for 1:1 personalization redefining the way brands and people connect. We’re the only marketing platform that combines powerful technology with human expertise to build authentic customer relationships. By unifying SMS, RCS, email, and push notifications, our AI-powered personalization engine delivers bespoke experiences that drive performance, revenue, and loyalty through real-time behavioral insights. Recognized as the#1provider in SMS Marketing by G2, Attentive partners with more than 8,000 customers across 70+ industries. Leading global brands like Crate and Barrel, Urban Outfitters, and Carter’s work with us to enable billions of interactions that power tens of billions in revenue for our customers. With a distributed global workforce and employee hubs in New York City, San Francisco, London, and Sydney, Attentive’s team has been consistently recognized for its performance and culture. We’re proud to be included in Deloitte’s Fast 500 (four years running!), LinkedIn’s Top Startups , Forbes’ Cloud 100 (five years running!), and Inc.’s Best Workplaces . About the Role We are looking for a security leader to own the vision, strategy, and execution of security across Attentive’s products, infrastructure, and corporate environment. This role combines people leadership, technical depth, and cross-functional influence. You will manage and scale a team of engineers and security analysts responsible for vulnerability management, application security, cloud infrastructure, endpoint security, detection and response, security operations, and corporate security. You will partner closely with Engineering, Product, and Legal to deliver a roadmap that strengthens Attentive’s security posture while enabling high developer velocity. This role is both strategic and hands-on: You are comfortable operating at both a strategic and hands-on level, and you know how to collaborate effectively with engineering teams to deliver results. What You'll Accomplish Mentor and develop security engineers and analysts, fostering a culture that balances strong security rigor with engineering velocity, innovation, and psychological safety Define and own the security strategy and roadmap, leveraging technical expertise and threat modeling to drive systematic, data-informed risk reduction Lead and scale the security function across vulnerability management, application security, cloud and endpoint security, detection engineering, and security operations Oversee high-impact security initiatives, including enterprise secrets management, CSPM tooling, vulnerability management program, and platform abuse prevention Guide the development and operation of critical security services, ensuring operational excellence, reliability, and scalability, and serve as an escalation point during security incidents Serve as a security domain expert, providing guidance and communicating real security risks and concepts to senior leadership, engineering teams, and other partners Foster a collaborative, cross-functional culture by partnering closely with engineering leaders across Attentive and maintaining high standards, influencing roadmaps, and exemplifying strong leadership Partner closely with Engineering, Product, Legal, IT, and other stakeholders to embed security into the SDLC, architecture reviews, and operational practices, acting as a trusted advisor and security domain expert to senior leadership and technical teams Your Expertise 7+ years of experience in security engineering, including 2+ years leading, mentoring, and developing engineers and/or managers Broad, hands-on experience across modern security domains, including cloud security, product security, detection engineering, incident response, corporate security, and GRC Strong familiarity with modern security tooling and infrastructure, such as Datadog, Terraform, SentinelOne, Wiz, Panther, Semgrep, or similar platforms Proven ability to lead and influence cross-functional initiatives, clearly communicating security risks, tradeoffs, and recommendations to both technical and non-technical stakeholders Excellent problem-solving skills, with the ability to manage complex and ambiguous security challenges in a pragmatic, outcomes-focused way Demonstrated ability to balance security rigor with developer velocity, making thoughtful tradeoffs between risk reduction and productivity Comfort engaging deeply in technical discussions around infrastructure design, product architecture, automation, and secure-by-default system patterns Nice to Haves Experience building and scaling security programs in fast-paced, high-growth environments A strong track record of building, leading, and retaining high-performing security teams while fostering a positive and collaborative security culture Deep understanding of modern and emerging threat landscapes, including AI/ML-related threats, and applying that knowledge to drive measurable risk reduction Deep experience securing complex cloud environments, including threat modeling, architecture reviews, incident response, and risk prioritization Strong data-driven mindset, using metrics to prioritize work and improve security outcomes Track record of taking a pragmatic approach to security, knowing when to challenge “best practices” and tailor requirements to the needs of the business Familiarity with Java, scripting languages, or AI/agentic approaches to build tools and automate security workflows You'll get competitive perks and benefits , from health & wellness to equity, to help you bring your best self to work. For US based applicants: - The US base salary range for this full-time position is $200,000 - $260,000 annually + equity + benefits - Our salary ranges are determined by role, level and location #LI-MDK1 Attentive Company Values Default to Action - Move swiftly and with purpose Be One Unstoppable Team - Rally as each other’s champions Champion the Customer - Our success is defined by our customers' success Act Like an Owner - Take responsibility for Attentive’s success Learn more about AWAKE , Attentive’s collective of employee resource groups. If you do not meet all the requirements listed here, we still encourage you to apply! No job description is perfect, and we may also have another opportunity that closely matches your skills and experience. At Attentive, we know that our Company's strength lies in the diversity of our employees. Attentive is an Equal Opportunity Employer and we welcome applicants from all backgrounds. Our policy is to provide equal employment opportunities for all employees, applicants and covered individuals regardless of protected characteristics. We prioritize and maintain a fair, inclusive and equitable workplace free from discrimination, harassment, and retaliation. Attentive is also committed to providing reasonable accommodations for candidates with disabilities. If you need any assistance or reasonable accommodations, please let your recruiter know.