Senior Manager, Product Security

Job Overview:

The Senior Manager, Product Security will lead a team of Application Security and Cloud Security engineers, safeguarding the company’s products and services. This role involves overseeing security tools, coordinating security processes, and fostering effective collaboration across technology teams. The ideal candidate will possess broad expertise in information security, particularly in application security, infrastructure and cloud security, and have a strong technical mindset. Prior experience managing cybersecurity in a SaaS environment and proven team management and mentoring skills are essential.

What you'll do:

• Manage and mentor a team of Application Security and Cloud Security engineers.
• Oversee the implementation and maintenance of security tools and technologies.
• Coordinate security processes and ensure they align with industry best practices.
• Facilitate effective collaboration across technology teams to integrate security into the product development lifecycle.
• Provide guidance and support to the peering teams and other stakeholders, promote security-aware culture and secure-by-design principles.
• Cross-functionally collaborate with technology teams to identify and remediate security issues, ensure secure design and operations.
• Track tool and process performance, create metrics to monitor effectiveness of the team’s operations.
• Manage workflows and responsibilities around security services and tools, primarily within Azure and AWS environments,
• Ensure secure deployment practices using Infrastructure as Code (IaC) and container management  tools (Terraform, Kubernetes, Docker).
• Orchestrate vulnerability assessments and penetration testing activities (SAST, DAST, 3-rd party assessments, metrics, reporting, remediation processes).
• Design and manage encryption and key management solutions such as AWS Key Management Service (KMS) and Azure Key Vault.
• Ensure compliance with security standards and frameworks such as ISO 27001, SOC 2, and industry-specific regulations.

What we're looking for: 

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Extensive experience in information security, with a focus on application security, infrastructure, and cloud security.
• Proven experience managing cybersecurity in a SaaS environment.
• Strong technical mindset and problem-solving skills.
• Excellent team management and mentoring abilities.
• Effective communication and collaboration skills.
• Flexibility to adapt to evolving security threats and changing project requirements.
• Capability to lead and mentor junior team members and peers.
• Self-motivated and proactive mindset in identifying potential security risks and implementing preventive measures.
• Ability to build strong relationships with colleagues and stakeholders
• Relevant certifications (e.g., CISSP, CISM) are a plus
• Azure: Azure Security Center, Azure Sentinel, Azure Key Vault, Azure Active Directory, Azure Policy, Azure Monitor, Azure Firewall, Azure DDoS Protection.
• AWS: AWS Security Hub, AWS IAM, AWS KMS, AWS CloudTrail, AWS Config, AWS Shield, AWS WAF, AWS CloudFormation.
• General: Terraform, Splunk, OWASP ZAP, Burp Suite, Nessus, Jenkins, Docker, Kubernetes.

 

 

About AvidXchange

AvidXchange is a leading provider of accounts payable (“AP”) automation software and payment solutions for middle-market businesses and their suppliers. By trade, we are a technology company, but if you ask anyone who works here, they’ll tell you our people are at the core of who we are. We focus on creating a culture of Diversity, Inclusion & Belonging, and are proud to be a safe place where teammates can bring their whole selves to work. At AvidXchange, mindset is everything. We are Connected as People, Growth Minded, and Customer Obsessed. These three mindsets represent our culture – who we are, who we’ve always been, and they guide us to improve every day. Since our founding in 2000 in Charlotte, NC, we’ve created a company of over 1,600 teammates working across the U.S., or remotely. AvidXchange is proud to be Certified™ as a