Senior Engineering Manager, Software Supply Chain Security Full Time

Description:

• Build a globally-distributed, sustainable, and high-performing team through hiring, retention, and strategic organizational design.
• Identify emerging software supply chain threats in the industry and via in-house research, and adjust strategy and prioritization in a timely manner.
• Stay up-to-date with industry best practices and standards in the area of supply chain security, and grow the skills and capabilities of your teams accordingly.
• Collaborate with product management and cross-functional teams across all Gitlab areas to drive software supply chain security initiatives that touch on multiple stages of the developer workflow.
• Implement industry-based metrics to guide the team’s roadmap such as Third-Party Component Risk Score (TPCRS) and Supply Chain Attack Surface (SCAS) to guide the team’s roadmap.
• Plan and execute long-term strategies that move your team and the product stage(s) toward business objectives. This includes decision-making, alignment, staffing, prioritization, leading through change, and working through ambiguity.
• Lead and drive significant results for multiple teams that have a direct impact on the broader mission they contribute to.
• Develop and execute process enhancements while strategically influencing leadership decisions across multiple organizational levels.
• Enable quad planning team collaboration within product groups.
• Enable Product, Quality, and UX performance via solid stable-counterpart partnerships.
• Identify and resolve problems proactively, even in ambiguous situations or where negotiations are necessary, through advanced thinking, partnership, and foresight.

Requirements:

• Proven experience managing engineering managers and high-performing engineering teams, with a strong focus on software security.
• Deep understanding of software development lifecycles and security best practices.
• Familiarity with major open-source software ecosystems (Ruby/Gems, JavaScript/TypeScript/NPM, Java/Maven, Python/PyPI, C/C++, Go, Rust, the Linux kernel) and respective software supply chain security challenges.
• Strong technical skills in areas such as:
  • Secure coding practices.
  • Vulnerability scanning and analysis.
  • Cryptography.
  • Threat modeling.
  • Incident response.
• Experience with security frameworks and tools (e.g., OWASP, NIST, SAST, DAST).
• Data-driven approach to improving team productivity and effectiveness.
• Strong communication, collaboration, and stakeholder management abilities.
• Experience working on open-source or enterprise-grade Software Supply Chain Security (SSCS) products, as a manager/leader.
• Demonstrated experience delivering scalable solutions, from database to frontend performance, as an individual contributor or manager.
• Ability to discuss architectural concepts and systems design, and to broker technical decisions at a high-level between individual contributors.

Benefits:

• Benefits to support your health, finances, and well-being.
• All remote, asynchronous work environment.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.
• Home office support.