Typical Work Day:

1. Facilitate AppSec and DevSecOps team sprint ceremonies to:

   1. Stay up to date on what the team is working on

   2. Identify blockers impacting the team

   3. Refine and Plan work for upcoming sprints

2. Collaborate with team members (PMO, Technical Project Managers, Tech Leads, Individual Contributors, etc.) across the engineering organization to identify in-scope teams, dependencies, and technical requirements for project work

3. Facilitate ticket parties to break down projects and/or asks from technical stakeholders into manageable units of work in the team backlog

4. Collaborate with the AppSec and DevSecOps Team leadership to identify project dependencies, manage the backlog, and prioritize development tasks for future sprints

5. Track and provide updates on team operations, using tools like JIRA and Confluence.

6. Coordinate release cycle of internal tools and manage cross team dependencies.

Requirements:

• 5+ years of experience in product management in a technical environment.

• Strong project management skills and ability to present work to executive staff.

• Background in Computer Science, Business, IT, or related field.

• Must be a self-starter, a team player, and driven.

• Have a technical understanding of the various components of an application stack and how they are deployed into the cloud

• Familiarity with standardized security frameworks (PCI, NIST, ISO, GDPR, etc.)

• Ability to lead conversations/clarify security initiatives with stakeholders ranging from VP Level technical stakeholders to individual contributors within the engineering organization.

• Outstanding written/oral, organizational, analytical skills, and attention to detail.

• Familiar with DevOps, DevSecOps, or other security best practices

• Experience breaking down technical asks into deliverable chunks of work

• Experience communicating across diverse cultures, work styles, and personalities.

Nice to haves:

• Previous start-up, consumer mobile and/or consulting experience is a strong asset

• Familiarity with Major Cloud Providers - Amazon Web Services Google cloud platform, Microsoft Azure

• Previous software/security engineering experience

• Familiarity with Containerized Workloads

• Experience with observability and metrics tools like Dynatrace, DataDog, plus for experience in ASPM/ASOC tooling.

• Familiarity with the Secure Software Delivery Lifecycle (SSDLC)