Technical Program Manager (Security)

Join Fivetran, a leading data pipeline company, as a Technical Program Manager (Security). In this role, you will lead and manage security-related initiatives across the organization, collaborating with cross-functional teams to ensure successful planning, execution, and delivery of security programs. You will be responsible for executing the security vulnerability management program, enhancing processes, and advocating for tools that support shift-left strategies. The ideal candidate will have over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security.

• Lead and manage security-related initiatives across the organization, collaborating with cross-functional teams to ensure successful planning, execution, and delivery of security programs.
• Execute the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities, and provide technical oversight and accountability for the delivery of security fixes.
• Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices.

• Strong familiarity with OWASP principles and best practices for securing web applications, including the OWASP Top 10 vulnerabilities and Application Security Verification Standard (ASVS)
• Proven ability to work collaboratively with cross-functional teams, including product teams, SRE/QE engineers, and developers, to embed a security-first mindset into workflows and practices
• Deep understanding of key security domains, including application/infrastructure security, data privacy, threat modeling, vulnerability management, and secure software development lifecycle (SDLC)
• Strong analytical, problem-solving, and communication skills to address security challenges, coupled with the ability to influence and collaborate effectively with engineering teams in enhancing security measures and mitigating vulnerabilities in a dynamic, fast-paced environment
• Exceptional skills in prioritization, organization, and multitasking to manage multiple programs effectively
• Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives
• Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security
• Proficient in researching and validating vulnerabilities while proposing effective remediation or mitigation strategies
• Up-to-date knowledge of market trends, emerging technologies, and best practices in cloud security
• Strong grasp of security concepts and principles, including network security, encryption, authentication, and authorization
• Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS technologies, and automation tools for security orchestration. Experience with scripting languages for automating security processes