Everyone is welcome at Handshake. We know diverse teams build better products and we are committed to creating an inclusive culture built on a foundation of respect for all individuals. We strongly encourage candidates from non-traditional backgrounds, historically marginalized or underrepresented groups to apply.

Your impact

Handshake is looking for a technical Security Technical Program Manager who is passionate about building and embedding security into product development and has a track record for running successful programs such as vulnerability management, to join our team and help mature Handshake’s security. In addition to engineering, this role will also partner with critical business functions such as product management, legal, privacy, and Go-to-market teams to ensure security risks are reviewed, remediated, and communicated in a timely manner.

Your role

• Design and operationalize programs to achieve comprehensive product and infrastructure security vulnerability insight from internal and external emerging threats and risks.
• Work with cross-functional teams of technical and non-technical stakeholders to interpret, communicate, and drive full lifecycle security programs.
• Build programs, drive process improvements, and work with engineering teams and other stakeholders to develop innovative solutions to complex technical security challenges.
• Serve as the primary point of contact for customer security inquiries and concerns related to Handshake’s product and cloud infrastructure.
• Own and manage security risk reduction programs such as security penetration testing, red and blue teaming, and business continuity to scale Handshake’s security maturity.
• Conduct security assessments of third-party vendors and partners to identify potential risks.
• Work with legal, procurement, and other teams to ensure security requirements are included in contracts and service agreements.
• Stay up-to-date with industry best practices and regulatory requirements related to third-party risk and customer data protection.

Your experience

• At least 5 years of experience in a technical program management role, preferably within information security.
• Proven ability to work with cross-functional teams and influence the strategic direction of a hyper-growth environment.
• Ability to set priorities and make high-judgment trade-offs between deliverables and speed-to-launch.
• Proven experience in third-party risk management and customer-facing security roles.
• Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST), and regulations (e.g., GDPR, CCPA).
• Experience with security risk assessment methodologies and tools.
• Excellent communication skills with the ability to articulate complex security issues to a diverse audience.
• Strong project management skills and the ability to manage multiple initiatives simultaneously.

Bonus areas of expertise

• Experience with information security strategic planning and roadmap development.
• Familiarity with security vulnerability management programs.
• Knowledge of security frameworks and compliance requirements.
• Relevant security certifications (e.g., CISSP, CISM, CRISC) are highly desirable.

Compensation range

• $170,000-$210,000

For cash compensation, we set standard ranges for all U.S.-based roles based on function, level, and geographic location, benchmarked against similar stage growth companies. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location. Final offer amounts are determined by multiple factors, including geographic location as well as candidate experience and expertise, and may vary from the amounts listed above.

About us

Handshake is the career platform for Gen Z. With a community of over 17 million students, alumni, employers, and career educators, Handshake’s network is where career advice and discovery turn into first, second, and third jobs. Nearly 1 million companies use Handshake to build their future workforce—from Fortune 500 to federal agencies, school districts to startups, healthcare systems to small businesses. Handshake is built for where you’re going, not where you’ve been.

When it comes to our workforce strategy, we’ve thought deeply about how work-life should look at Handshake. With our hybrid-work model, employees benefit from collaboration and shared team experiences three days per week in our vibrant offices, and enjoy the flexibility of remote wor