Note: The job is a remote job and is open to candidates in USA. Calendly is a scheduling software company trusted by millions of users worldwide. Calendly is seeking a highly technical and strategic Senior Manager of Product Security and Security Operations to lead and scale both functions, build partnerships across Product and Engineering, embed security throughout the software development lifecycle, and strengthen threat detection and response.
Responsibilities
- Lead the Product Security and Security Operations teams, developing talent and holding the teams accountable for measurable outcomes
- Define strategy, operating plans, metrics, and resource priorities aligned with Calendly’s highest risks
- Build strong partnerships across Security and with key cross-functional teams to align on risk, response, and remediation
- Communicate priorities, risk tradeoffs, and program performance to senior leadership and cross-functional stakeholders
- Scale product security capabilities, including threat modeling, application security testing, vulnerability management, and developer enablement
- Lead detection engineering, incident response, threat intelligence, monitoring, and threat hunting capabilities
- Guide high-severity incidents, complex investigations, and security reviews, driving durable remediation of systemic issues
- Establish standards for control coverage and effectiveness across applications, cloud, identity, and endpoints
- Manage program budgets and strategic security vendors
Skills
- 7+ years of cybersecurity experience across product, application, or infrastructure security, plus security operations, incident response, or detection engineering
- 4+ years managing experienced security engineers or multidisciplinary technical teams
- Strong communication skills and the ability to navigate sensitive decisions with technical teams and senior leaders
- Experience defining strategy and delivering measurable outcomes across multiple security disciplines
- Experience building or scaling product security programs with Product and Engineering teams
- Strong knowledge of secure software development, threat modeling, application security testing, vulnerability management, and cloud-native architectures
- Strong knowledge of incident response, detection engineering, SIEM, EDR, cloud security, and identity security
- Experience translating ambiguous risks into prioritized, cross-functional programs and driving remediation through influence
- Experience managing budgets, MSSPs, testing firms, or other security providers
- Authorization to work in the United States, as Calendly does not provide immigration sponsorship at this time
Benefits
- All full-time (30 hours/week) employees are also eligible for equity awards.
- Eligible Sales employees also qualify for a Sales Incentive program.
Company Overview