Product Security Manager II

Credit Acceptance is proud to be an award-winning company with local and national workplace recognition in multiple categories! Our world-class culture is shaped by dedicated Team Members who share a drive to succeed as professionals and together as a company. A great product, amazing people and our stable financial history have made us one of the largest used car finance companies nationally.

Our Engineering and Analytics Team Members utilize the latest technology to develop, monitor, and maintain complex practices that help optimize our success.  Our Team Members value being challenged, are encouraged to express their ideas, and have the flexibility to enjoy work life balance.  We build intrinsic value by partnering with all functions of our business to support their success and make strategic business decisions.  We focus on professional development and continuous improvement while enjoying a casual work environment and Great Place to Work culture!

Outcomes and Activities:

• This position will work from home; occasional planned travel to an assigned Southfield, Michigan office location may be required.  However, this position is permitted to work at a Southfield, Michigan office location if requested by the team member.
• Leads and mentors team members on product security including both application and platform security
• Integrates security testing and automation into “Golden Path”
• Collaborates with cloud engineers to ensure environment is designed and configured securely
• Reports vulnerabilities to Vulnerability Management team while working with developers and engineers to perform risk assessment and remediate
• Ensures Security Operations has appropriate telemetry needed to monitor for threats
• Documents attack surface and risks through SCA and SBOMs
• Leads security champion effort within development and platform engineering
• Provides security training to key engineering resources
• Identifies friction points and collaborates with Engineering team members to alleviate
• Participates in work planning processes to ensure the most important work is aligned to the appropriate team, that work is broken down enough that outcomes can be delivered incrementally
• Leads and mentors cross functional team members on securing world class products that deliver customer delight and business value
• Builds effective teams by ensuring you have the right people and setting clear expectations
• Monitors and evaluates team performance and continuously coach and mentor team members
• Sets up your team for operational success by having a sound understanding on the system ecosystem, architecture, technologies and system domains and how these are used to achieve business outcomes
• Is an active participant in on-call escalation and incident management

Competencies:

• Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer’s shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience.
• Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions.
• One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively.
• Owner’s Mindset: Owner’s Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business.

Requirements:

• Bachelor’s Degree or equivalent experience
• 10+ years of information security experience
• Minimum of 5 years’ experience leading product/application security teams
• Strong experience leveraging automation and integration
• Strong experience with scanning tools including SAST, DAST and IAST
• Experienced in Software Composition Analysis and creating SBOMs, securing cloud applications specifically in AWS, and cloud security strategies including posture management tools (CSPM, DSPM) and incident response<