Senior UST Technical Program Manager

<h1><strong>Life at UiPath</strong></h1><p>The people at UiPath believe in the transformative power of automation to change how the world works. We’re committed to creating category-leading enterprise software that unleashes that power.</p><p>To make that happen, we need people who are curious, self-propelled, generous, and genuine. People who love being part of a fast-moving, fast-thinking growth company. And people who care—about each other, about UiPath, and about our larger purpose.</p><p>Could that be you?</p><p></p><h1><strong>Your mission</strong></h1><p>As a <strong>Senior Technical Program Manager (TPM) for Product Security</strong>, you will lead programs that embed security into every phase of UiPath’s product lifecycle - from concept to release and beyond.<br/>You’ll partner with engineering and product management teams to build scalable, secure-by-design processes, improve the technical depth of our defenses, and continuously strengthen the resilience of our products and platform. You’ll help define how UiPath delivers secure innovation in an increasingly AI-driven world.<br/></p><h1><strong>What you'll do at UiPath</strong></h1><ul><li><p>Drive large-scale <strong>product security programs</strong> that ensure UiPath products and services are secure throughout the SDLC</p></li><li><p>Develop <strong>metrics, dashboards, and KPIs</strong> to measure security maturity, risk posture, and program effectiveness; report findings to senior leadership</p></li><li><p>Collaborate with engineering and product leaders to facilitate <strong>secure design, development, and deployment practices</strong> across the organization</p></li><li><p>Lead initiatives on <strong>threat modeling, secrets management, vulnerability management, code integrity, dependency security</strong>, and <strong>secure CI/CD pipeline maturity</strong></p></li><li><p>Partner with security engineering to define and automate key controls - including <strong>SAST/DAST, SBOM, infrastructure-as-code, container scanning, and supply chain protection</strong></p></li><li><p>Build strong relationships with product, platform, and engineering teams to align technical roadmaps with security priorities</p></li><li><p>Lead <strong>cross-organizational response efforts</strong> for product-related vulnerabilities or emerging security threats</p></li><li><p>Act as a <strong>trusted bridge</strong> between technical and GTM teams - translating complex risks into clear, actionable outcomes</p></li><li><p>Contribute to the <strong>security culture and education</strong> of UiPath engineers through enablement and proactive engagement</p></li></ul><p></p><h1><strong>What you'll bring to the team</strong></h1><ul><li><p><strong>5+ years</strong> of technical program management experience, with significant focus on <strong>application, product, or cloud security</strong></p></li><li><p>Proven ability to <strong>drive complex, multi-team initiatives</strong> across engineering, product, and security organizations</p></li><li><p>Deep understanding of <strong>secure development principles, software supply chain security, and modern DevSecOps practices</strong></p></li><li><p>Hands-on experience with security tooling (SAST/DAST, container scanning, dependency scanning, or code analysis)</p></li><li><p>Familiarity with <strong>cloud-native environments</strong> (AWS, Azure, GCP) and <strong>containerized architectures</strong></p></li><li><p>Ability to use <strong>data-driven metrics</strong> to communicate progress and influence decision-making</p></li><li><p>Strong technical background - able to engage engineers on topics such as vulnerability remediation, CI/CD integration, and code assurance</p></li><li><p>Exceptional communication, stakeholder management, and leadership skills - comfortable influencing across functions and time zones</p></li><li><p>Demonstrated track record of executing under ambiguity and delivering measurable, business-aligned security outcomes</p></li></ul><p><strong>Nice to have</strong></p><ul><li><p>Experience with <strong>AI/ML product security</strong> or <strong>data protection</strong> in distributed environments.</p></li><li><p>Previous development experience in languages like Python, Go, or Java.</p></li><li><p>Knowledge of OWASP top 10</p></li></ul><p>Maybe you don’t tick all the boxes above—but still think you’d be great for the job? Go ahead, apply anyway. Please. Because we know that experience comes in all shapes and sizes—and passion can’t be learned.</p><p>Many of our roles allow for flexibility in when and where work gets done. Depending on the needs of the business and the role, the number of hybrid, office-based, and remote workers will vary from team to team. Applications are assessed on a rolling basis and there is no fixed deadline for this requisition. The application window may change depending on the volume of applications received or may close immediately if a qualified candidate is selected.</p><p>We value a r