Security Technical Program Manager Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As a Technical Support Engineer (TSE), you’ll play a critical role in supporting our customers by resolving their most complex technical issues and serving as the final technical escalation point for our Technical Support Specialists (TSS). You’ll collaborate closely with our Support and Engineering teams to ensure we deliver a best-in-class customer experience while meeting our service SLAs. Our goal is to provide best-in-class Technical Support to our customers. Our team’s mission: “We make complex solutions seem simple, and are leaders in customer education”. We build strong partnerships with our customers through trust and transparency, for this reason our Technical Support Metrics are available publicly. What you’ll do as a Technical Support Engineer at Vanta: Provide technical support to Vanta customers through email, screen sharing, and chat, responding within established SLAs. Develop a deep understanding of Vanta’s product capabilities, integrations, configurations, messaging, and more. Own and resolve complex technical customers’ issues, while also partnering with Technical Support Specialists (TSS) on their most challenging cases as the final technical escalation point within the Support team. Demonstrate a strong sense of ownership and accountability for the overall customer experience. Clearly explain complex solutions to customers and document them for future use. Problem-solve and troubleshoot in a repeatable manner, documenting in our Support CRM to help identify trends. Create reproducible test cases and collaborate with Product and Engineering to improve the platform. Validate and escalate bugs to Engineering,

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. COMPANY DESCRIPTION: Okta is the foundation for secure connections between people and technology. By harnessing the power of the cloud, Okta allows people to access applications on any device at any time, while allowing for strong security protection. The Okta service integrates directly with an organization’s existing directories and identity systems, as well as 6,500+ applications. Because Okta runs on an integrated platform, organizations can implement Okta quickly at large scale and low total cost. Thousands of customers, including Adobe, Allergan, Chiquita, LinkedIn, and Western Union, trust Okta to help their organizations work faster, boost revenue, and stay secure. To learn more about Okta, visit https://www.okta.com . JOB PURPOSE: In this role, you will be tasked with providing hands-on implementation and deployment services to our customers. We are looking for an experienced, enthusiastic and hands-on leader who can rapidly learn the Okta platform, our technology and the value proposition that we bring to customers of all sizes. You will lead multiple concurrent customer deployment projects with the number one goal to ensure long-term customer success. Additionally you will engage with the full Customer Success team in order to assure a smooth transition post-deployment to the support/maintenance phases. Finally, you will also be responsible for the continuous improvement of delivery processes and m

About the Team At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology. We solve complex problems with data, creativity, and agility — always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what’s next. About the Role This role is part of the Security Architecture & Engineering team and focuses on embedding security into systems, platforms, products, and infrastructure by design. The role provides security architecture consultancy to technical and business stakeholders, helping teams make pragmatic, risk-based security decisions while supporting business objectives. It is responsible for identifying architectural security risks, design flaws, and security gaps across new initiatives, infrastructure changes, cloud adoption, platform services, and business-critical systems. In addition, the role contributes to building reusable reference security architectures, design principles, and assessment frameworks aligned with regulatory and industry frameworks such as NIST, ISO, PCI DSS, GDPR, and KVKK. The role also drives process improvement and automation initiatives to improve the scalability, consistency, and maturity of security architecture practices across the organization.

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer, you will be reporting to the Manager of Application Security leading the Security Design and Review pod. You will play a pivotal role in shaping the growth of Information Security's (InfoSec) Application Security team, collaborating with engineering teams early in their processes to provide secure design solutions and establish security standards. Your responsibilities will include threat modeling, secure system design, automation, and penetration testing. As a key member of the team, you will drive company-wide projects across diverse tech stacks, working with engineering leaders to remediate security challenges. You will define and evolve the technical vision for scaling application security practices across the organization. You will: Lead company-wide security initiatives to address critical security challenges. Build and nurture cross-company relationships to achieve security objectives. Provide guidance on product security processes and standards. Define and expand partnerships with key engineering teams across Roblox. Apply critical thinking and analytical skills to develop security protocols and communicate effectively with stakeholders. Re

MongoDB Technical Services Engineers use their outstanding problem solving and customer service skills, along with their deep technical experience, to advise customers and to solve their complex MongoDB problems. Technical Services Engineers in the Infrastructure team are skilled in automation, backup, performance, and security that underpins mission-critical deployments at scale. In addition engineers within the team have specialisations in advanced technology areas such as Search, Vector Search, auto-embedding, event-driven and agentic workloads. Our engineers combine their MongoDB expertise with passion, initiative, teamwork, and a great sense of humor to achieve exceptional results for our customers. The position will be based in our Sydney office. The standard work week post ramping will be Tuesday to Saturday, every week. Why MongoDB is a fantastic place to work and build your career Be a part of the company that’s reinventing the database, passionate about innovation and speed Enjoy a fun, inspiring culture that is engineering focused Work with exceptionally talented people around the globe Learn, contribute, and make an impact on the product and community Cool things you’ll do MongoDB, the developer data platform and AI platform of choice for modern applications, is on a mission to change the way people think about databases. As they build intelligent, data-driven experiences on our platform, our customers naturally encounter questions and challenges about how our approach to data and databases fits their specific use cases and architectural needs. In Technical Services, it’s our job to guide these people, helping them design, operate, and optimize their solutions so they can succeed with MongoDB. You'll be working alongside our largest customers, solving their complex issues - resolving questions on architecture, performance, recovery, security, and everything in between. You'll be an expert resource on standard methodologies in running MongoDB at scale, wh

MongoDB Technical Services Engineers use their exceptional problem solving and customer service skills, along with their deep technical experience, to advise customers and to solve their complex MongoDB problems. Technical Service Engineers are experts in the entire MongoDB ecosystem - database server, drivers, cloud and infrastructure. This also includes services such as Atlas (database as a service), or Cloud Manager (which helps customers with automation, backup and monitoring of their MongoDB systems). Our engineers combine their MongoDB expertise with passion, initiative, teamwork and a great sense of humor to help our customers to be successful with MongoDB. We are looking to speak to candidates who are based in Bengaluru for our hybrid working model. Cool things you’ll do You'll be working alongside our largest customers, solving their complex challenges - resolving questions on architecture, performance, recovery, security, and everything in between. You'll be an expert resource on best practices in running MongoDB at scale, whatever that scale may be. You'll be an advocate for customers' needs - interfacing with our product management and development teams on their behalf. And you'll contribute to internal projects, including software development of support tools for performance, benchmarking, and diagnostics. As an ideal candidate, you will have We consider all candidates with an eye for those who are self taught, curious, and multi-faceted. Our ideal TSE candidate should also have 6 plus years of experience Systems engineering experience, including Linux performance, memory management, I/O tuning, configuration, security, Storage, networking, clusters, and troubleshooting Should have a good understanding of Networking concepts and protocols (DNS, TCP/IP, SSL/TLS, etc.) Broad awareness of customer workloads and use cases, including performance, availability, and scalability Experience analyzing issues holistically, from the application tier through the dat

MongoDB Technical Services Engineers use their exceptional problem solving and customer service skills, along with their deep technical experience, to advise customers and to solve their complex MongoDB problems. Technical Service Engineers are experts in the entire MongoDB ecosystem - database server, drivers, cloud and infrastructure. This also includes services such as Atlas (database as a service), or Cloud Manager (which helps customers with automation, backup and monitoring of their MongoDB systems). Our engineers combine their MongoDB expertise with passion, initiative, teamwork and a great sense of humor to help our customers to be successful with MongoDB. We are looking to speak to candidates who are based in Austin for our hybrid working model. Cool things you’ll do You'll be working alongside our largest customers, solving their complex challenges - resolving questions on architecture, performance, recovery, security, and everything in between. You'll be an expert resource on best practices in running MongoDB at scale, whatever that scale may be. You'll be an advocate for customers' needs - interfacing with our product management and development teams on their behalf. And you'll contribute to internal projects, including software development of support tools for performance, benchmarking, and diagnostics. What you need We consider all candidates with an eye for those who are self-taught, insatiably curious, and multi-faceted. The ideal candidates should have strong technical experience in one (or more) of the following areas Systems administration Distributed systems Network Administration Database architecture and administration Application Architecture Data architecture and design Performance tuning and benchmarking Extra bonus points if you have experience in one or more of Java, Python, Ruby, C, C++, C#, Javascript, node.js, Go, PHP, or Perl If you have an operations background, we prefer experience administering large-scale production environments, i

Who we are About Privy Our mission is to make privacy and user ownership the default online. To do so, we build simple, flexible APIs and tools for developers that make it easy to build new products on crypto rails. Privy owns the abstractions and infrastructure layer above wallets, integrating across chains, third-party providers, and Stripe products like Treasury and Link. We get to solve hard technical problems while leveraging Stripe's distribution to reach customers like Ramp, Klarna, Deel, Kraken, Hyperliquid, and Fomo — powering experiences for both mainstream users and crypto natives. Learn more about Privy: Privy and Stripe: Bringing crypto to everyone About the team Engineering at Privy is distinguished by: High urgency: Shipping very small iterations, very fast, to learn very quickly. Product taste: Our customers are developers, and to build effective products for them requires technical knowledge - you will often be "the PM". Security mindset: A great portion of our product is trust. While we have a dedicated security team, every engineer brings security to their designs from the start. In practice, we use boring technology like Node, React, and AWS so we can focus our engineering energy entirely on pushing the boundaries of Privy's core product, e.g. through hardware enclaves, multi-region low latency APIs, and blockchain abstractions that are accessible to mainstream developers. What you’ll do As a Security Engineer at Privy, you will help keep a rapidly growing platform secure through hands-on investigation, operational ownership, and building real code to solve real problems. You’ll work across security operations, incident response, application and infrastructure security, and internal tooling. This is not a role limited to reviewing logs and designs or simply escalating findings. You will carry real ownership for the day-to-day work that protects Privy: investigating anomalies, improving security workflows, and building the automa

About the Team The Infrastructure Engineering function sits within IT and is responsible for reliably building, deploying, and operating critical on prem and hybrid environments that power internal services and critical R&D environments. This is an early, high-leverage technical role focused on applying strong Site Reliability Engineering discipline to environments where uptime, safety, recoverability, and security are non-negotiable. This person helps replace bespoke, one-off infrastructure with standardized infrastructure-as-code building blocks that compound reliability and operational leverage as OpenAI scales. About the Role We are looking for an experienced Site Reliability Engineer working on security infrastructure to design, build, and operate reliable, secure, and scalable infrastructure that underpins identity, access, endpoint, and shared platform services across the company. In this role, you will be a senior technical owner for infrastructure and identity systems end to end, from architecture and implementation through policy enforcement, upgrades, recovery, and day-two operations. You will build durable, production-grade platforms that remove operational friction, enforce security by default, and enable teams to move faster with confidence. This role is well suited for a hands-on senior engineer who thrives in ambiguity, enjoys owning complex systems end to end, and raises the reliability and security bar by replacing fragile implementations with standardized, repeatable infrastructure. This role is based in our San Francisco HQ and requires in-office presence. In this role, you will: Design, build, and operate reliable infrastructure across on-prem, hybrid, shared, and product adjacent environments. Establish standardized infrastructure patterns that replace bespoke implementations with repeatable, auditable, secure-by-default systems. Own the lifecycle of critical infrastructure platforms, including provisioning, deployment, upgrades, patching,

About the Team The Solutions Engineering team consists of trusted technical advisors who help organizations adopt OpenAI’s technology safely, effectively, and responsibly. We partner closely with customers, Sales, Product, Engineering, Research, and Security to translate frontier AI capabilities into practical workflows that create measurable impact. Cybersecurity is one of the most important areas where AI can help. As frontier models become increasingly capable of reasoning across code, logs, infrastructure, vulnerabilities, and security evidence, customers need expert guidance to evaluate and deploy these systems safely. Our Field Security Specialists help security leaders and practitioners apply OpenAI models, APIs, Codex, agentic workflows, and emerging cyber capabilities to real defensive challenges. About the Role We are looking for a Manager of Field Security Specialists to build and lead our customer-facing cyber solutions engineering function. This is a hands-on leadership role for someone who can develop an exceptional team while remaining close to the technology and our customers. You will establish the operating model for the function, raise the quality of specialist engagements, and personally support our most strategic and technically complex customer opportunities. You will work across CISO-level strategy, practitioner-level cybersecurity challenges, and hands-on solution design. Your team will help customers explore workflows including application security, secure software development, vulnerability management, threat modeling, cloud and identity security, SOC operations, detection engineering, incident response, and security validation. This is not an internal CISO or corporate incident-response role. It is a customer-facing leadership opportunity focused on helping defenders achieve safe, measurable outcomes with frontier AI. In this role, you will: Hire, coach, develop, and lead a high-performing team of Field Security Specialists. Establish the

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Staff Security Engineer for our Enterprise Security team. The threats facing modern organizations are evolving at an unprecedented pace — driven by AI, cloud complexity, and an ever-expanding attack surface. Our Enterprise Security team is responsible for protecting Snowflake, our employees, and our customers by designing, implementing, and maintaining robust endpoint security solutions at enterprise scale, defending not just endpoints and identities, but the AI-assisted workflows and intelligent systems that define how the modern enterprise operates. AS A STAFF SECURITY ENGINEER AT SNOWFLAKE, YOU WILL: Develop, maintain, and scale Snowflake's endpoint security solutions while actively contributing to architecture and strategy. This includes EDR, DLP, secure browser, MDM, and AI security solutions across a complex multi-cloud, multi-SaaS enterprise environment. Own the technical roadmap for endpoint security tooling as Snowflake rapidly grows. Build intelligent security platforms and automate security operations using AI and robust software engineering. Identify opportunities to reduce toil, increase detection fidelity, and accelerate response through thoughtful, scalable automation. Monitor security events, investigate incidents, and build real-time detecti

Security Architect - AI-Powered Security Engineering About the Team The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. When 5% of Indian households shop with us, it’s important to build resilient systems to manage millions of orders every day. We’ve done this, with zero downtime! We value speed over perfection, and see failures as opportunities to become better. By 2030, Meesho will be the world’s most trusted and secure digital ecosystem, operating on an AI-native, Zero-Trust, self-healing architecture. As we shift toward an era where autonomous agents generate and deploy code, we want to ensure our security scales seamlessly with engineering velocity. We place special emphasis on the continuous growth of each team member, fostering a strong 'Founder’s Mindset' that helps us move fast. About the Role We are looking for a highly technical, hands-on Security Architect (Individual Contributor) to guide and lead our AI-Powered Security Engineering charter. In this role, you will bridge the gap between conventional DevSecOps, infrastructure security, and the rapidly evolving landscape of AI. You will optimize our AI-driven Software Development Lifecycle (SDLC) by designing secure-by-default guardrails for both human developers and AI coding agents. Your mission is to ensure near-zero vulnerabilities from application and data security failures reach production. A significant portion of your focus will involve advanced Red Teaming, utilizing LLMs to improve Meesho's security posture, and architecting defenses for our autonomous AI systems against prompt injection, data leakage, and jailbreaking attacks.

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: Detection Engineering is responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. This role focuses on proactive threat detection, automation-first practices, and continuous improvement of detection coverage and accuracy, supporting the WPP SOC transformation into an Autonomic Security Operations model. What you'll be doing: Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms. Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats. Work with wider WPP engineering teams to ensure high-quality, normalized telemetry for effective detection. Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines. Root Cause Analysis (RCA) Conduct RCA on missed detections, delayed responses, and high-severity incidents. Identify technical and process-level causes of detection failures or inefficiencies. Drive corrective actions based on RCA outcomes (e.g., rule improvements,