Senior Manager, Security

Runs LaunchDarkly's Product Security team and acts as the second leader in the security division, partnering with the Director of Security and covering the Director's operational duties during audits, board cycles or leave. The role is remote in the western US.

The senior manager leads a team of security engineers and is charged with reshaping how security works into a risk-led programme rather than one paced by audits, in which product teams are accountable for their own security standing and the security group advises and checks instead of doing the fixes. In practice that means routing findings to owning teams with mapped severity, letting automation and AI take the first pass so fewer decisions need a person, and showing each team its security health in its service reviews. The manager is incident manager of record, holds delegated approval for vendor and access decisions, publishes monthly service levels to engineering and quarterly posture to executives, and keeps the risk register that sets priorities. The model starts in Product Security and is meant to spread across the division.

LaunchDarkly wants five or more years managing in security or engineering, including senior engineers, proof of having already shifted a security team away from gatekeeping toward engineering ownership, with numbers to show for it, and experience running SaaS security incidents end to end, external communication included. The person should still be able to judge a pull request, threat model or cloud finding, and know AWS security at scale and SOC 2, ISO 27001 or FedRAMP audits.