Security Engineering Manager

Overview

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabilities for breakfast and leads with curiosity, code, and caffeine. This isn't a sit-back-and-schedule-meetings kind of role-you'll be in the trenches with your team, squashing bugs (the dangerous kind), locking down systems, and making sure our software is built like a digital fortress. You'll champion secure coding, make threat modeling feel less like paperwork and more like detective work, and still have time to help your team grow into confident, capable engineers who know their way around both code and conversation.


Your focus will be on leading initiatives and driving the team on our Core Systems, requiring a mix of deep expertise and a willingness to jump into different areas across the organization, doing whatever it takes to get the job done.

Wage


Up to $185,000 / year


Benefits

• 100% employer-paid medical, dental & vision Full coverage for employees - nothing comes out of your paycheck. Plus an annual review with a raise option.
• Time off that grows with you 22 days PTO + 4 holidays to start. After 3 years it bumps to 29 days, and after 5 years you move to flexible time off - not accrued, not capped. Take time off when you want.
• Parental leave & 401(k) match Paid parental leave, plus up to 6% company 401(k) matching with no vesting period - it's yours from day one.
• Quarterly allowance Spend it on whatever makes work better: a comfier remote setup, continuing-education classes, a plant for your desk, coffee for a coworker, a massage for yourself... really, whatever.
• No dumb perks (and a trail mix bar) No weekend dog-walking gimmicks that look cool but cost nothing because nobody uses them. We spend on benefits you'll actually use - an open-concept office, friendly coworkers, a creative environment, and yeah... a trail mix bar.

Responsibilities

• Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance).
• Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work - ensuring all three disciplines are aligned.
• Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers.
• Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails).
• Build internal security tools and automation that make it easier for product teams to ship securely.
• Oversee red team engagements and turn findings into actionable fixes, not just reports.
• Manage defensive capabilities - incident response, detection engineering, monitoring - and continually improve them.
• Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy.
• Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions.
• Balance being a builder and a leader: stay hands-on enough to earn respect from hackers, but prioritize leading and scaling the team's impact.

Requirements

• BS in Computer Science or equivalent experience.
• 5+ years building and securing software - hands-on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures.
• Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation.
• Experience leading security or engineering teams - setting strategy, running scrums, conducting reviews, and mentoring talent.
• Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production.
• Exposure to offensive and defensive security practices - red team, blue team, or incident response experience a plus.
• Ability to communicate risk and solutions to execs, engineers, and auditors - respected by hackers and trusted by leadership.
• Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe.