Security Engineering Manager

Security Engineering Manager The Security Engineering Manager is responsible for cybersecurity design, implementation, and maintenance in alignment to business initiatives. The individual leads the team that builds and operates the controls protecting Redwood's technology and digital assets, and acts as an escalation point for security operations, threat remediation, and incident response. This is a working leadership role. The manager develops a small team of engineers while staying directly involved in architecture, tooling, and incident handling. The security program at Redwood is being built out deliberately rather than inherited, so this role carries real influence over what we standardize on, how detection and response operate, how we work with our managed security service provider, and how our engineering practices scale. The successful candidate works closely with decision makers to identify, recommend, develop, implement, and support cost-effective security solutions. They partner with infrastructure, platform engineering, application development, data, and database teams, as well as internal audit, legal, and enterprise risk, and translate technical risk into terms the business can act on. Responsibilities & Duties Lead, hire, and develop a team of security engineers, setting technical standards and clear expectations for the work they produce. Lead cybersecurity engineering initiatives and implement designs that meet specific operational needs and environmental factors, and continuously assess systems, networks, and data to determine what defenses are necessary. Own the design and operation of core security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on the Microsoft security stack including Entra ID, Defender, Sentinel, Purview, and Intune. Own Identity and Access Management architecture and standards, including user access provisioning and deprovisioning processes, periodic access reviews, and related reporting. Run vulnerability management and patching end to end, including scanning, testing, and remediation, and negotiate ownership and service levels with infrastructure, application, and database teams. Mature detection engineering and incident response capability, lead investigations into security breaches or intrusions, and manage the operational relationship with our managed security service provider. Create and maintain security policies, standards, and procedures aligned to the NIST Cybersecurity Framework, and keep them current as the environment changes. Embed security into delivery through pipeline controls, infrastructure as code guardrails, secrets management, and secure configuration baselines. Support regulatory and control obligations including SOX IT general controls. Develop executive reporting for key security technologies, including Key Performance Indicators and Key Risk Indicators, for the CTO, executive leadership, and the board. Manage outsourced security vendors, tooling evaluations, renewals, and a portion of the security budget, including consolidation decisions where coverage overlaps. Participate in the after-hours on-call rotation for incident response. Other duties as assigned. Required Experience & Education Bachelor's degree related to Computer Science, Business, or Information Systems preferred, or equivalent experience. Eight or more years in security engineering or security operations, including at least two years leading engineers as a manager or technical lead. Expertise in incident response, security operations, SIEM management, and security policy creation. Depth in cloud security on Azure, including identity and access management, network controls, and native security tooling. Practical knowledge of vulnerability and patch management at enterprise scale, with the ability to drive accountability across teams outside of direct reporting lines. Experience analyzing and documenting cybersecurity solutions and mapping them to business requirements. Familiarity with NIST and CIS frameworks and experience supporting audits or regulatory examinations. Scripting and automation ability in PowerShell, Python, or similar, with enough fluency in CI/CD and infrastructure as code to review the team's work. Working knowledge across IAM, SIEM, firewalls and proxies, encryption, IDS and IPS, MFA, MDM, Windows Server and Linux, networking, and virtualization. Ability to set and change priorities amongst multiple competing constituencies. Strong written and verbal communication, including the ability to explain risk and tradeoffs to non-technical stakeholders. Preferred Skills CISSP, CISM, CCSP, GIAC, or Azure security specialty certifications. Experience in financial services, mortgage, or another regulated industry. Experience with Fortinet, SASE, or zero trust network access deployments. Exposure to securing AI and machine learning workloads. Experience standing up or maturing a security program rather than operating an established one. Compensation & Benefits A reasonable estimate of the total compensation range for this role is $180,000.00 - $200,000.00. The actual salary offer will depend on job-related factors including education, geographic location, training, licensure and certification, and experience. CoreVest also offers a competitive benefits package including discretionary corporate bonus program, multiple health plans, STD and LTD options, company-sponsored life insurance, fitness reimbursement, paid parental leave, volunteer time, Paid Time Off, ESPP, and 401(k) matching. Equal Opportunity Statement At Redwood Trust, we are committed to fostering an inclusive workplace where diversity is valued and everyone has the opportunity to thrive. We welcome applications from individuals of all backgrounds and experiences. We are an equal opportunity employer and do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Redwood Trust