https://www.linkedin.com/jobs/view/2618665031/?refId=17cc1444-6056-4fd4-be10-d5c2a919241b

Security Manager

Sitecore

Belgium, Europe

 About the job: We are looking for a Security Engineering Manager to help validate that our services, applications, and websites are secured against the latest threats. You will be responsible for managing a team of security engineers conducting security reviews and threat modeling, evolving the security assurance process, and creating metrics to demonstrate your teams performance. You will help set the direction for a team of security professionals that is responsible for Sitecore products and services. This role combines long term strategic planning to raise the bar on security across the enterprise with the excitement and challenge of quickly reacting to new threat scenarios. As a Senior Manager at Sitecore, you will be expected to speak authoritatively on behalf of your team and your technical knowledge should demonstrate both depth and breadth. You will be responsible for your teams organizational structure and how that team works within the context of the larger Sitecore Security team. Leveraging the strengths of individual team members, delegating tasks appropriately and managing delivery of long term projects will all be critical tasks for this role. A Technical Manager has deep knowledge in their domain and is a sought after thought leader across the organization. They have both management and technical expertise and actively participate in the organizations planning processes. Managers in this role must define metrics to quickly and accurately present the teams performance and variance against its goals. They must also participate in and/or coordinate segments of cross-Sitecore initiatives, communicating status and results effectively across the division. A Technical Manager III is expected to seek out stretch assignments for your current team and foster their professional career development. You must be legally authorized to work in Belgium. Responsibilities: Team management, growth, and organization, Professional development of team members, Project management, Metrics and projections, Driving security initiatives, Recruiting, Process Improvement, Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we are building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future. Qualifications: BS in Computer Science, Management Information Systems, Engineering or related field, or equivalent work experience, Minimum of 6 years of experience directly managing an engineering team and minimum 2 years of managing other managers. 6+ years of working knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Meets/exceeds Sitecore functional/technical depth and complexity for this role. Experience driving large, cross-organization initiatives. Excellent written and verbal communication skills, especially experience with executive-level communications. Skilled at explaining complex technical issues in terms understandable by the business. Strong sense of ownership, urgency, and drive. Experience with multiple programming languages (such as, Java, Python, Scripting, etc.). Experience with vulnerability risk and impact assessment. Sharp analytical abilities and proven design skills. Experience providing training and mentorship. Experience at a consumer-scale tech company. Experience with a modern public cloud-based tech stack. Working with monitoring and observability tools in a distributed environment. Experience in Agile Delivery processes (e.g. SAFe). Skills: Be able to think at the macro level, while ensuring the design works on the micro-level. Understanding of industry regulatory and compliance requirements like ISO27001 and SOC2. Hands-on experience with modern SIEM solutions, like Elastic SIEM. Familiar with security considerations of cloud computing: including data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss, and DoS attacks. Hands-on experience with infrastructure as code processes and tools like Terraform. Comfortable working with git daily. Comfortable working with Linux. Understanding of industry regulatory and compliance requirements like ISO27001 and SOC2. Hands-on experience with modern SIEM solutions, like Elastic SIEM. Familiar with security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss, and DoS attacks. Technologies we work with: Kubernetes, Docker, Terraform, Ansible. Redis, ElasticSearch, ELK, Auth0, Cloudflare, Palo Alto Cortex XSOAR. Atlassian Bamboo, Jira, Confluence, Kibana. Git, BitBucket. 