Security Engineering Manager Jobs
Security Engineering Manager jobs are open across financial services, technology, healthcare, and defense, from senior individual contributor to director level, with specializations in cloud security, application security, and security operations. Find a role that fits from the openings below and apply directly.
Find JobsLooking for remote work? View remote security engineering manager jobs →Student or new grad? View security engineering manager internships →Overview
Showing 5 of 295+ Security Engineering Manager jobs
To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Software EngineeringJob Details
About Salesforce
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
The Experience
Join the team building the next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform at Salesforce. As a lead full stack engineer, you own the architecture, technical roadmap, and delivery of the platform's core engines, including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation. You guide distributed feature teams from concept through deployment and shape how AI coding assistants are used across the engineering organization to raise both speed and code quality.
What You'll Actually Be Doing
- Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle.
- Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and run low-latency risk evaluation engines.
- Partner with Product Management, Security Architects, and GRC leaders to translate business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs.
- Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and set rigorous continuous integration and continuous delivery (CI/CD) and testing benchmarks across the engineering organization.
- Design and implement extensible Policy as Code and Compliance as Code engines, using Open Policy Agent (OPA) or custom evaluation frameworks, along with runtime platforms such as Cloud Security Posture Management (CSPM) and Endpoint Detection and Response (EDR) tools, that dynamically audit infrastructure and enterprise controls.
- Constrain the outputs of AI coding assistants with declarative, machine-readable rules.
- Lead the design of automated evidence collection pipelines that integrate with multi-cloud environments (Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and corporate productivity applications such as Workday and NetSuite.
- Build dynamic risk analysis engines and auditing interfaces that map continuous technical evidence against major regulatory standards, including National Institute of Standards and Technology (NIST) Special Publication 800-53, International Organization for Standardization (ISO) 27001, and System and Organization Controls (SOC) 2.
- Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
- Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
- Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.
- Critically evaluate code, whether human- or AI-generated, for correctness, quality, security, and performance.
- Lead the adoption and integration of AI coding assistants, such as Claude, Gemini, and OpenAI application programming interfaces (APIs), across the engineering lifecycle to improve team productivity, automate test generation, and streamline refactoring.
- Mentor senior and mid-level engineers across time zones, fostering a culture of technical excellence, accountability, and continuous learning.
- Lead cross-functional alignment and technical discussions across a geographically dispersed team that works in an asynchronous-first culture.
You're Our Person If...
- 10 to 12+ years of professional full stack software and systems engineering experience, including 3+ years in a Lead, Staff, or Principal Engineer capacity leading technical projects and distributed engineering teams.
- A proven record of taking complex Software as a Service (SaaS) platforms or enterprise software projects from architectural inception to production delivery.
- The ability to break down ambiguous business requirements into high-level architecture designs, concrete technical epics, and actionable execution plans.
- Deep mastery of both Python and Java, including enterprise frameworks such as FastAPI, Django, Flask, and Spring Boot, and microservice design patterns.
- Advanced proficiency in modern JavaScript or TypeScript frameworks (React, Vue, or Angular), with experience designing scalable component libraries and complex data visualization dashboards.
- Strong expertise in relational databases (PostgreSQL, MySQL), NoSQL and graph databases, distributed data processing, containerization (Docker, Kubernetes), and a public cloud platform (AWS, Azure, or GCP).
- Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria.
- Direct experience building or architecting systems around continuous control monitoring, automated audit trails, or policy engine evaluation, such as OPA with the Rego language.
- A demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
- Experience using AI tools, such as Claude Code, GitHub Copilot, Codex, and Cursor, in development workflows, along with a strategic vision for integrating AI into technical workflows.
- Advanced prompt engineering skills, including the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready.
- A related technical degree required.
Even Better If...
- Experience architecting commercial GRC tools, Security Information and Event Management (SIEM) systems, or CSPM systems.
- Practical experience implementing OPA or similar policy-as-code tools at scale.
- Security certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or a cloud security specialty certification.
- Experience with the Salesforce platform, including Lightning Web Components, Apex, and Salesforce Object Query Language (SOQL).
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
Accommodations
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com. At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $172,500 - $260,100 annually. 

The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Software EngineeringJob Details
About Salesforce
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
The Experience
Join the team building the next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform at Salesforce. As a lead full stack engineer, you own the architecture, technical roadmap, and delivery of the platform's core engines, including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation. You guide distributed feature teams from concept through deployment and shape how AI coding assistants are used across the engineering organization to raise both speed and code quality.
What You'll Actually Be Doing
- Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle.
- Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and run low-latency risk evaluation engines.
- Partner with Product Management, Security Architects, and GRC leaders to translate business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs.
- Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and set rigorous continuous integration and continuous delivery (CI/CD) and testing benchmarks across the engineering organization.
- Design and implement extensible Policy as Code and Compliance as Code engines, using Open Policy Agent (OPA) or custom evaluation frameworks, along with runtime platforms such as Cloud Security Posture Management (CSPM) and Endpoint Detection and Response (EDR) tools, that dynamically audit infrastructure and enterprise controls.
- Constrain the outputs of AI coding assistants with declarative, machine-readable rules.
- Lead the design of automated evidence collection pipelines that integrate with multi-cloud environments (Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and corporate productivity applications such as Workday and NetSuite.
- Build dynamic risk analysis engines and auditing interfaces that map continuous technical evidence against major regulatory standards, including National Institute of Standards and Technology (NIST) Special Publication 800-53, International Organization for Standardization (ISO) 27001, and System and Organization Controls (SOC) 2.
- Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
- Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
- Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.
- Critically evaluate code, whether human- or AI-generated, for correctness, quality, security, and performance.
- Lead the adoption and integration of AI coding assistants, such as Claude, Gemini, and OpenAI application programming interfaces (APIs), across the engineering lifecycle to improve team productivity, automate test generation, and streamline refactoring.
- Mentor senior and mid-level engineers across time zones, fostering a culture of technical excellence, accountability, and continuous learning.
- Lead cross-functional alignment and technical discussions across a geographically dispersed team that works in an asynchronous-first culture.
You're Our Person If...
- 10 to 12+ years of professional full stack software and systems engineering experience, including 3+ years in a Lead, Staff, or Principal Engineer capacity leading technical projects and distributed engineering teams.
- A proven record of taking complex Software as a Service (SaaS) platforms or enterprise software projects from architectural inception to production delivery.
- The ability to break down ambiguous business requirements into high-level architecture designs, concrete technical epics, and actionable execution plans.
- Deep mastery of both Python and Java, including enterprise frameworks such as FastAPI, Django, Flask, and Spring Boot, and microservice design patterns.
- Advanced proficiency in modern JavaScript or TypeScript frameworks (React, Vue, or Angular), with experience designing scalable component libraries and complex data visualization dashboards.
- Strong expertise in relational databases (PostgreSQL, MySQL), NoSQL and graph databases, distributed data processing, containerization (Docker, Kubernetes), and a public cloud platform (AWS, Azure, or GCP).
- Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria.
- Direct experience building or architecting systems around continuous control monitoring, automated audit trails, or policy engine evaluation, such as OPA with the Rego language.
- A demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
- Experience using AI tools, such as Claude Code, GitHub Copilot, Codex, and Cursor, in development workflows, along with a strategic vision for integrating AI into technical workflows.
- Advanced prompt engineering skills, including the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready.
- A related technical degree required.
Even Better If...
- Experience architecting commercial GRC tools, Security Information and Event Management (SIEM) systems, or CSPM systems.
- Practical experience implementing OPA or similar policy-as-code tools at scale.
- Security certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or a cloud security specialty certification.
- Experience with the Salesforce platform, including Lightning Web Components, Apex, and Salesforce Object Query Language (SOQL).
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
Accommodations
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com. At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $172,500 - $260,100 annually. 

The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.Security Engineering Manager Jobs by Experience Level
Top Cities Hiring Security Engineering Managers
Explore security engineering manager openings in the cities hiring most right now.
See All 295+ Security Engineering Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSecurity Engineering Manager Job Market
Who's Hiring
- Lockheed Martin47
- Amazon29
- Meta10
- Google8
- Deloitte8
Top Industries Hiring
- Technology & Software23
- Investment & Asset Management5
- Banking & Financial Services4
- Retail2
- E-Commerce & Online Marketplaces2
What Employers Look For
The qualifications that appear most often in security engineering manager jobs.
- 5+ years of experience in security engineering with at least 2 years in a people management role
- Deep expertise in cloud security across AWS, Azure, or Google Cloud platforms
- Experience designing and running a secure software development lifecycle program
- Relevant certifications such as CISSP, CISM, or cloud security credentials preferred
- Proficiency with threat modeling, vulnerability management tools, and SIEM platforms
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Security Engineering Manager Job Search
Quantify your security program impact
Hiring managers want to see scope, not just titles. Rewrite your resume bullets to show team size, budget owned, vulnerabilities remediated at scale, or risk reduction outcomes you drove, not just the frameworks you implemented or tools you evaluated.
Highlight cross-functional leadership experience
Security engineering managers are judged on how well they work with engineering, product, and compliance teams. Your resume should name the stakeholders you influenced and the cross-team projects you shipped, not just internal security wins.
Filter openings by the security domain you lead
Cloud security, AppSec, and detection engineering each require different technical depth. Search by those sub-domains rather than by the title alone so you find roles where your specific expertise is the core requirement, not a nice-to-have.
Apply early to roles that fit
Migrate Mate lists security engineering manager openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare for the engineering manager split
Interviews for this role split between security depth and people management. Expect at least one round on how you build and retain a security team, run hiring loops, and handle underperformance, alongside technical design questions on threat modeling or secure architecture.
Negotiate scope before you negotiate salary
Before your offer call, clarify team size, reporting structure, and whether the role owns a product security roadmap or supports one. Those structural differences determine your actual influence and your path to a director title, so settle them before you accept.
Security Engineering Manager Jobs: Frequently Asked Questions
Which companies are hiring the most security engineering managers?
The companies hiring the most security engineering managers right now include Lockheed Martin, Amazon, and Meta, with the largest share of openings in California, Texas, and Washington, based on current listings on Migrate Mate as of November 2026. Financial services and large cloud platform companies consistently account for a significant portion of active openings.
How many security engineering manager jobs are remote?
About 70% of security engineering manager openings are fully remote or hybrid as of November 2026, making it one of the more flexible management roles in engineering. Cloud security and application security sub-disciplines tend to have the highest share of remote positions, while roles tied to on-premises infrastructure or classified environments are more likely to require on-site presence.
How do you become a security engineering manager?
Start by building deep technical credibility as a security engineer, ideally across cloud, application, or detection engineering. Take on informal leadership by mentoring peers, leading incident response efforts, or owning a security initiative end to end. Then move into a formal team lead or tech lead role before stepping into a full management position. Pursuing a certification like CISSP or CISM signals readiness for the organizational side of the role.
Can you get hired as a security engineering manager without prior management experience?
Yes, but you need to demonstrate leadership in other forms. Employers will accept candidates who have led security projects across engineering teams, run hiring panels, or built a security function from scratch, even without a direct reports line on their resume. Frame any mentorship, cross-team coordination, or program ownership you have owned as evidence of management readiness, and target companies that promote from senior individual contributor roles.
What does the security engineering manager interview process look like?
Most processes run four to six rounds. Expect an initial recruiter screen, a hiring manager conversation focused on your leadership philosophy and team-building approach, a technical design round covering topics like threat modeling or secure architecture, a behavioral panel with engineering and product partners, and a final loop with a senior security or engineering leader. Some companies add a written exercise asking you to assess a security program gap and propose a remediation roadmap.
Where can I find and apply to security engineering manager jobs?
You can find and apply to security engineering manager jobs on Migrate Mate, which lists current openings from companies across the United States. Search the listings to find roles that match your background and apply directly to each one that fits.
See All 295+ Security Engineering Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs