Senior Manager, Product Security

Greenlight is the leading family fintech company on a mission to help parents raise financially smart kids. We proudly serve more than 6 million parents and kids with our award-winning banking app for families. With Greenlight, parents can automate allowance, manage chores, set flexible spend controls, and invest for their family’s future. Kids and teens learn to earn, save, spend wisely, and invest. 
At Greenlight, we believe every child should have the opportunity to become financially healthy and happy. It’s no small task, and that’s why we leap out of bed every morning to come to work. Because creating a better, brighter future for the next generation depends on it.
We are looking for an experienced Senior Manager, Product Security who can be hands-on at operating Greenlight’s Product Security program, and also passionate about building and leading a team dedicated to securing the products that our customers trust.
As a Senior Manager, Product Security, you will be responsible for leading the team that ensures the security of Greenlight’s products and services from conception to launch and beyond, as well as operating the processes along with the team. You will play a critical role in shaping our security posture, embedding security into our development lifecycle, and protecting our customers' data. You will:
This role reports to the Sr Director, Security GRC & Trust.

Your day-to-day:

• Develop and execute a comprehensive product security strategy that aligns with the company's goals and risk appetite.
• Lead, mentor, and grow a high-performing team of product security engineers, fostering a culture of security awareness and ownership across the engineering organization.
• Integrate security best practices and automated tooling into the entire Software Development Lifecycle (SDLC), from design and threat modeling to testing and deployment.
• Drive the security of our CI/CD pipeline and implement supply chain security measures.
• Establish and enforce API security standards and best practices across the organization.
• Implement and manage security controls for Infrastructure as Code (IaC) to ensure secure cloud deployments.
• Oversee the application security program, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and manual penetration testing.
• Establish and manage a mature incident response process for product-related security events and vulnerabilities.
• Develop guidelines and implement safeguards for utilizing AI tools in development securely
• Establish comprehensive secure coding practices, and define logging and monitoring specifications for applications.
• Partner with engineering, product, and platform teams to enhance Greenlight Application’s security features.
• Define and track key performance indicators (KPIs) to measure the effectiveness of the product security program and communicate posture to executive leadership.
• Stay current with the latest security threats, vulnerabilities, and industry best practices to continuously evolve our security controls and processes.

What you’ll bring to the team:

• 8+ years of experience in information security, with at least 6 years focused on application or product security for customer-facing applications.
• 4+ years of experience directly managing and leading a team of security engineers.
• Deep technical knowledge of web and mobile application security, common vulnerabilities (OWASP Top 10), and secure coding practices.
• Deep technical knowledge of CI/CD pipeline and relevant tools for web and mobile applications
• End to end experience on implementing tools for Product Security (i.e. API Security, Mobile Protection, SAST, runtime scanning, etc.)
• Hands-on experience with security tools for SAST, DAST, IAST, and penetration testing.
• Proven success in implementing and maturing a Secure SDLC in a fast-paced, agile environment.
• Strong understanding of cloud security principles in AWS environments.
• Excellent communication skills with the ability to articulate complex security concepts to both technical and non-technical audiences.

Technologies we use:

• Node.js, Java/Kotlin, React, Redux, Swift, SwiftUI
• AWS
• MySQL, DynamoDB, Redis
• Kubernetes, Ambassador, Helm, Rancher

Work perks at Greenlight:

• Medical, dental, vision, and HSA match 
• Paid life insurance, AD&D, and disability benefits 
• Traditional 401k with company match
• Unlimited PTO 
• Paid company holidays and pop-up bonus holidays 
• Professional development stipends
• Mental health resources  
• 1:1 financia