Job Description

We’re looking for an experienced Engineering Manager inside the Infrastructure Engineering group to lead our security engineering team. Security engineering at Reverb is responsible for leading, designing, and building secure systems and practices for our e-commerce platform. They are highly involved in planning technical systems, designing secure practices, governance, and proactive engagement with engineering and product organizations.

The Security Engineering Manager leads our security engineers and analysts in protecting, planning, and building scalable hardened systems across our architecture. You’ll be leading these security professionals by contributing to project oversight and planning, security assessments, long-term scope planning, proactive and preventative approaches, and being a collaborative management professional that can quickly lead our organization to make safe and practical decisions.

We are open to remote hires within multiple states as well as candidates locally in Chicago, IL. For candidates who will work remotely visit this link for a list of approved locations.

Responsibilities

• Day to day management of security engineers and analysts at Reverb
• Security sprint planning and retrospectives
• Collaborate with other engineering managers to achieve roadmap goals
• Perform security reviews, audits, assessments, and remediations actions or reporting
• Engage in highly technical architecture feedback and design reviews
• Hands-on engagement with git, DevOps, and security tools to help bolster understanding with other technical teams
• Partner in security leadership with the Etsy House of Brands, which includes Etsy, Depop, and Elo7
• Advise crucial GRC, technical, and policy to engineering leadership

Qualifications

• 2+ years leading or supervising security teams
• 2+ years of hands-on experience with AWS, Terraform, Helm, Kubernetes, and other generalized DevOps tooling
• 4+ years experience in the security domain with technical expertise or contributions
• Track record of crafting, developing, and handling security projects
• Ability to develop policy, process, and procedures to apply to engineering organizations
• Detection and response concepts with SIEM, EDR, Incident Management, IDS, and WAF
• Experience with Vuln Management, CICD Security, BugBounty
• Regulatory experience such as PCI, FedRAMP, SOX, etc.
• Experience with JIRA and Confluence
• Experience with Git

Nice to Have

• 4+ years of management
• Deep networking and threat modeling experience
• Experience with Nucleus Sec
• Experience with CrowdStrike platforms
• Deep experience with GitHub and GitHub security controls
• Hands-on experience with AWS EKS, Rancher, or other Kubernetes platforms