Senior Manager of Security Engineering 

ABOUT SECURITY

Our team is made up of people from varied backgrounds, including security practitioners who built secure systems and processes at startups, Silicon Valley Tech companies, Fortune 500 companies, and for the Federal government. We secure Stitch Fix’s technology stack which includes modern software with modern techniques like TDD, continuous delivery, DevOps, and service-oriented architecture. Cross-functional partnerships are deeply meaningful to us and are how we’ve built up immense trust with the people running the business.  We focus on high-value, human-centric security solutions and initiatives that solve clearly identified problems but are designed in a scalable way so that our defenses continue to enhance client trust long-term as we continue to innovate as a company. In fact, some of our proudest moments come from solving security problems without writing a line of code.

ABOUT THE ROLE

We are looking for a Senior Manager of Security Engineering, for our Information Security organization. Our team members and leaders are given a great deal of autonomy in the pursuit of keeping Stitch Fix secure.  You will be primarily responsible for the continued evolution of our Application Security, DevSecOps and Cloud Security capabilities. As a Senior Manager, strong thought leadership, partnership, strategy-setting, and communication skills are a must. 

You will lead the Application Security and DevSecOps functions focused on delivering secure code and deployment capabilities through an understanding of how Stitch Fix works. You will also be leading our Cloud Security function, focused on building controls and defenses to better secure our cloud infrastructure. We trust you to focus your time and efforts where they are needed most and to rely on the strong engineers on your teams. Your commitment to applying security to business and technology challenges in clean & innovative ways will make you a trusted advisor to your partners and their teams. You will own projects and influence our direction.

You won’t do this alone. Your teams will collaborate with business partners to define product requirements, plans, and deliverables. You will work with team members to take advantage of learning and growth opportunities in tech and product through real day-to-day work. You will impact the business in tangible, visible ways and will always have a seat at the table.

We’re looking specifically for leaders who place an emphasis on usable security. Stitch Fix is a fast-growing company, and our security program needs to be able to keep pace with that growth while not disrupting innovation. You will help us improve our defenses when it comes to Cloud and Infrastructure Security and respond effectively in leading the Incident Response function. You will lead teams to prototype, implement, test, deploy and maintain secure solutions and processes. You will present possible technical and business process solutions to various stakeholders, clearly explaining your decisions and how they address real user needs, incorporating feedback in subsequent iterations.

We cannot succeed without strong partnership across the company and in many different forms. Your cross-functional team will propose and build solutions for everything from warehouse process improvements to internal accounting systems. 

REQUISITE SKILLS AND EXPERIENCE

• At least 8+ years in Information Security or related disciplines (IT, Software Engineering, etc)
• At least 8+ years delivering holistic Security Architecture solutions across Cloud Service and Infrastructure (Network, Compute and Internet)
• 5+ years working in a CI/CD paradigm bringing observability, ML and AI to augment the build and commit process, all the while reducing toil and increasing agility
• Have had 8+ years working in an agile framework dev model
• Prior Management and Architecture experience in AWS / GCP / Azure Service ecosystems.
• Develop requirements for the design of systems, components, platforms, sustainability, supportability and patterns to be developed across the technical org.
• Well-versed on the development, use and consumption of service maps, dependency maps, network and API flows, threat models and other documentation that contribute to converting complex needs of business capabilities, product, and strategy into a set of highly leverageable and transformative technical systems, patterns, and strategies.
• Work with the product and program management team to communicate the extent of current technical capabilities and the impact and boundaries they present to feature development.  
• Understand and align on future technical needs and help inform sequencing of product features and technical investments to maximize effici