Manager Information Security

• Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing.
• Use AI-assisted development (“vibe coding”) and modern engineering practices to rapidly prototype security tools, then harden them for production use.
• Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms.
• Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments.
• Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions.
• Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support.
• Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends.
• Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable.
• Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations.
• Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing.
• Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably.
• Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively.

Skills and Attributes for Success

• Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep.
• Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output.
• Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues.
• Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP.
• Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab.
• Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks.
• Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms.
• Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions.
• Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders.