Senior Manager of Enterprise Security, True Anomaly

• This is an ideal role for a leader who has grown as both a hands-on technical contributor and a people manager, who is energized by developing engineers, and who wants to build a high-performing security function from the ground up
• This position requires the ability to obtain and maintain a security clearance
• 5+ years of experience directly managing security engineering teams, including hiring, performance management, and career development
• 7+ years of total experience in information security or a related technical field, including significant time as a hands-on individual contributor
• Demonstrated experience building or maturing one or more of the following: enterprise security programs, vulnerability management programs, Operational technology (OT) security, or Linux/enterprise identity security
• Strong technical understanding of enterprise and cloud technologies (on-prem and SaaS), common vulnerabilities and attack vectors, and security tooling such as SIEM, IDS/IPS, vulnerability scanners, MDM, and endpoint protection
• Working knowledge of at least one programming or scripting language (e.g., Python, Go, Bash, Rust)
• Proven ability to translate business priorities into technical security strategy and communicate that strategy across all levels of an organization
• Excellent analytical, problem-solving, organizational, and communication skills
• Experience leading teams through active security incidents and on-call operations
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are a plus
• This role operates in a fast-paced, high-stakes environment where adaptability and rapid decision-making are essential
• On-call rotation oversight, including after-hours participation, is required in this role
• Must be comfortable leading a team under pressure during active security incidents
• High degree of autonomy and ownership over the enterprise security function
• Direct access to leadership and significant opportunity to influence security strategy

Desirable

• As the Senior Manager of Enterprise Security, you will lead the team responsible for securing the foundations that allow True Anomaly to fulfill its missions
• In this position, you will build, mentor, and lead a team of security engineers spanning enterprise security, vulnerability management, and Linux security, ensuring we are building security directly into the foundations of our company while aligning with compliance requirements
• You will regularly be faced with answering the question "How can we enable the business to operate with as little risk as necessary? and empowering your team to answer it too
• As the leader of True Anomaly's Enterprise Security team, you will set strategy and priorities across a broad portfolio: enterprise identity, endpoint and server hardening, cloud security, vulnerability management, and Linux fleet security
• You will translate business needs into a coherent security roadmap, remove blockers for your engineers, and represent the team to senior leadership
• You will be joining a fast-paced, challenging environment where your leadership will have direct, lasting impact on our overall security posture
• Team Leadership & Development:
• Hire, coach, mentor, and grow a team of enterprise security, vulnerability management, and Linux security engineers
• Set clear goals, provide regular feedback, and support career development and growth planning for direct reports
• Foster a collaborative, high-ownership team culture that thrives under fast-paced, high-stakes conditions
• Manage on-call rotations and ensure the team is prepared to respond effectively during active security incidents
• Strategy & Program Ownership:
• Define and drive the enterprise security roadmap across workstations, servers, cloud environments, and the Linux fleet
• Own the maturity and effectiveness of the vulnerability management program, including SLA adherence and risk-based prioritization
• Set direction for Operational technology (OT) security, enterprise identity, access management, and configuration management strategy, including Linux-specific identity and hardening initiatives
• Proactively identify gaps across the security program and prioritize resourcing to close them
• Cross-Functional Partnership:
• Partner with IT, DevOps, engineering, and manufacturing/OT stakeholders to embed security into the system development lifecycle and infrastructure-as-code workflows
• Represent the Enterprise Security team in change management and change review board processes, ensuring risks are identified and communicated
• Serve as an escalation point for cross-functional security questions and incidents
• Communicate security posture, metrics, and risk to technical and executive audiences
• Technical Oversight:
• Provide technical guidance and review for major initiatives such as centralized identity architecture, security hardening baselines (CIS/STIG), SIEM/detection strategy, and cloud security posture management
• Stay current with the evolving threat landscape and emerging security tooling to inform team priorities
• Support compliance efforts (e.g. CMMC, NIST) by ensuring the team produces necessary evidence and documentation