Enterprise Security Manager

Accretive Technology Group — Enterprise Security Manager

Work Remotely From: Arizona, California, Colorado, Florida, Michigan, Missouri, Nevada, South Carolina, Texas, or Washington.

Onsite/Hybrid Option: Seattle, WA

About Accretive Technology Group: We are a Seattle-based tech company with more than 25 years of proven success. Privately owned, stable, and profitable, we’ve built our reputation on open-source values, a strong DIY spirit, and a deep respect for craftsmanship. Our teams are customer-obsessed and built around empowered engineers who love what they do.

Role Overview: Our engineering team is FOSS-first, deeply collaborative, and committed to building secure, scalable systems that serve a wide range of customers and partners worldwide.

We’re looking for a seasoned and hands-on Enterprise Security Manager to lead the development and execution of our security initiatives across enterprise, development, and production environments. This is a unique opportunity to take ownership of a growing practice and build a high-impact security team from the ground up.

As our Enterprise Security Manager, you’ll be responsible for establishing and maturing a comprehensive security strategy that spans multiple environments and aligns with compliance standards such as PCI-DSS.

You'll partner closely with leadership and stakeholders across the business to design a long-term roadmap, shape internal security culture, and ultimately protect the integrity of our systems and services.

This role is a hybrid of strategic planning and technical execution — ideal for someone who has a broad understanding of modern security challenges and thrives in a fast-moving, distributed environment.

Key Responsibilities:

• Build and lead a small, high-performing security team — hiring, mentoring, and developing engineers and analysts.
• Define and drive the vision, roadmap, and execution of our security program across enterprise, development, and production environments.
• Lead vulnerability management efforts, including internal/external scans, real-time monitoring, bug bounty programs, and vulnerability disclosure (VDP).
• Design and implement tooling — including SIEM, SOAR, EDR, IDS, and logging platforms — to ensure visibility, threat detection, and automated response.
• Monitor evolving threat landscapes, lead incident response protocols, and develop systems for proactive risk management.
• Guide secure development efforts and partner with engineering teams on remediation strategies.
• Serve as the primary point of contact for PCI-DSS compliance, including oversight of scanning, remediation, and certification. Ensure the team maintains active PCI-ISA credentials.
• Lead audit readiness and evidence preparation for SOC 2, GAAP, and other regulatory IT audits, including control design and remediation efforts.
• Partner cross-functionally with infrastructure, development, IT, and compliance to embed security throughout the organization.
• Represent the company in the broader security community — contributing to research, attending or speaking at conferences, and helping elevate the team’s visibility.
• Foster continuous learning by supporting training, certifications, and conference attendance for security team members.
• Develop and communicate clear risk metrics, KPIs, and reports to leadership and stakeholders.

Qualifications:

• Proven experience in information security, including leadership or management of technical teams.
• Proven success building or scaling security programs in distributed, high-growth environments.
• Deep understanding of secure systems and network architecture in production and enterprise environments.
• Experience with both cloud and on-prem infrastructure security, endpoint protection, and secure SDLC.
• Proficiency with scripting or development languages (Python, Go, Bash, etc.) and a strong belief in automation wherever possible.