Senior Manager of Security Engineering, The RealReal

• 7+ years of experience in cybersecurity engineering, cloud security, and product security
• 3+ years of cybersecurity leadership experience
• Experience leading small teams with the technical ability and willingness to act as a player-coach
• Experience with public cloud environments such as AWS and GCP
• Deep understanding of modern SDLC and DevOps practices
• An automate-first mindset
• Self-motivated and able to work both independently and as part of a collaborative team
• Experience managing vendor partnerships and budgets
• Strong communication and documentation skills with experience briefing executives and senior leadership
• Willingness to provide support during nontraditional working hours or work in an on-call fashion

Desirable

• The RealReal information security team is looking for a Senior Manager, Security Engineering to be part of a growing team and assist in the build out and maturation of key cloud security, product security, enterprise security, automation, and cyber defense capabilities
• This person will play a key role in the maturing of The RealReals Global Information Security program
• This is a challenging and rewarding opportunity for an individual who is looking to lead a security function in a fast paced environment and wishes to grow within the organization and the thriving retail industry
• Motivate, manage, and oversee the cybersecurity team, acquiring and developing talent to create an environment that fosters professional growth and engagement, embodying the values at The RealReal (TRR)
• Foster cross-functional collaboration with product, engineering, data, and DevOps teams to integrate cybersecurity throughout our product lifecycle
• Enhance product and application security by implementing and maturing capabilities such as threat modeling, secure design review, SAST(static code scanning), DAST(dynamic code scanning), SCA(software composition analysis), and bot mitigation
• Improve cybersecurity integration into systems and platforms such as JIRA, Slack, deployment and data pipelines, AWS, and GCP
• Enhance TRRs cloud security program and demonstrate a strong understanding of public cloud security and risk mitigation capabilities
• Mature TRRs threat detection and incident response by integrating aspects of SOAR (Security Orchestration Automation and Response), improving threat hunting, and leveraging key external partnerships where necessary
• Actively contribute to the development and refinement of cybersecurity policies and drive adherence and standardization across departments
• Develop KPIs, OKRs, and other relevant metrics for cybersecurity
• Create comprehensive dashboards and reporting that accurately reflect the effectiveness of security metrics and alignment with organizational goals