Note: The job is a remote job and is open to candidates in USA. 6sense is a company focused on helping organizations achieve growth, retention, and efficiency through industry-leading technology. The Senior Manager, Security Engineering will lead Vulnerability Operations, Infrastructure Security, and Application/Product Security for 6sense’s AI-enabled, cloud-native SaaS platform, managing distributed teams across the United States and India. The role combines strategic leadership, technical oversight, security program development, and executive risk communication.
Responsibilities
- Build one integrated security engineering operating model across the three teams, with clear ownership, service expectations, priorities, and measurable outcomes
- Partner with Product, Engineering, Cloud Infrastructure, Data, AI/ML, Security Operations, Privacy, GRC, and Enterprise Technology leaders to embed security into planning and delivery
- Create an inclusive, high-accountability culture across time zones using clear decisions, durable documentation, effective handoffs, and intentional overlap for critical work
- Balance hands-on technical engagement with people leadership, program ownership, stakeholder influence, and executive-level risk communication
- Lead, coach, and develop managers and engineers across the United States and India. Establish role clarity, career paths, succession coverage, and consistent performance expectations
- Create an operating cadence that supports asynchronous execution, reliable cross-region handoffs, rapid escalation, and shared accountability
- Build workforce and capacity plans aligned to product growth, AI investment, risk, and business priorities
- Foster a culture of constructive challenge, disagree and commit, continuous learning, quality, and automation-first improvement
- Own the security strategy for AI-enabled product capabilities from design through production, including threat modeling, architecture review, secure development standards, testing, monitoring, and release readiness
- Address AI-specific risks such as prompt injection, insecure tool or agent access, sensitive-data exposure, model and data pipeline integrity, excessive agency, abuse, and third-party model or service dependencies
- Partner with AI/ML, Product, and Engineering teams to define secure patterns for models, agents, retrieval-augmented generation, application programming interfaces, data access, and human approval controls
- Advance product security practices including secure software development lifecycle controls, code and design review, application security testing, penetration testing, security champions, and coordinated vulnerability disclosure or bug bounty
- Own end-to-end vulnerability discovery, prioritization, remediation governance, exception management, and validation across applications, cloud infrastructure, containers, endpoints, operating systems, and third-party components
- Move beyond severity-only prioritization by incorporating exploitability, internet exposure, asset criticality, data sensitivity, available compensating controls, and active threat intelligence
- Improve remediation speed and predictability through automation, clear service-level objectives, transparent ownership, and decision-ready reporting
- Establish effective coverage for software supply chain risk, including open-source dependencies, build systems, artifacts, secrets, and continuous integration and delivery pipelines
- Own preventive and detective security guardrails for the AWS environment, infrastructure as code, containers, identity and access, network boundaries, workloads, secrets, logging, and data services
- Partner with Infrastructure and Platform Engineering to make secure cloud patterns easy to adopt and to reduce reliance on manual review
- Drive least privilege, secure administrative access, workload identity, segmentation, configuration assurance, and continuous cloud risk reduction
- Ensure architecture and change reviews focus on material risk while preserving engineering velocity
- Translate business strategy, product roadmaps, AI priorities, threat trends, customer commitments, and audit requirements into a multi-quarter security engineering roadmap
- Define quarterly objectives and key results, key performance indicators, and key risk indicators that show coverage, outcomes, trends, and remaining exposure
- Communicate risk and tradeoffs clearly to technical leaders and executives. Escalate material risks with practical options, owners, and recommended decisions
- Maintain policies, standards, control evidence, inventories, and operating procedures that support SOC 2, ISO 27001, privacy, customer assurance, and other applicable obligations
- Evaluate and rationalize security tools and services based on measurable risk reduction, engineer experience, coverage, integration, and total cost
Skills
- 8+ years in information security, including significant experience in product or application security, cloud security, vulnerability management, or security engineering
- 3+ years leading security engineering teams, including experience managing distributed or cross-region teams
- Demonstrated ability to build and mature security programs in a cloud-native SaaS environment, preferably on AWS
- Practical experience securing modern software delivery, including secure development lifecycle practices, application security testing, cloud-native infrastructure, containers, infrastructure as code, software supply chain, and vulnerability operations
- Working knowledge of AI and machine learning security risks and controls
- Ability to evaluate technical risk, make sound tradeoffs, and convert strategy into clear roadmaps, operating mechanisms, and measurable outcomes
- Strong executive and technical communication skills, including the ability to explain complex risk in plain language and influence without relying on authority
- Knowledge of relevant practices and frameworks such as NIST Secure Software Development Framework, OWASP, OWASP guidance for large language model applications, MITRE ATLAS, CIS Benchmarks, NIST 800-53, SOC 2, and ISO 27001
- Application and product security: threat modeling, architecture review, static and dynamic testing, code review, penetration testing, security champions, application programming interface security, and bug bounty or coordinated disclosure
- Cloud and infrastructure security: AWS, cloud security posture management, cloud-native application protection, identity and access management, containers, Kubernetes, infrastructure as code, secrets, operating system hardening, and logging
- Vulnerability and supply chain security: scanners, risk-based prioritization, dependency and artifact security, software bills of materials, build pipelines, remediation governance, and exception management
- AI security: model and data access, prompt injection, agent and tool permissions, retrieval security, output handling, data leakage prevention, red teaming, abuse monitoring, and third-party AI service risk
- Experience leading managers is preferred
- Experience securing large language model, agentic, or retrieval-augmented generation features is strongly preferred
- Bachelor's degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience
- Relevant certification such as CISSP, CISM, GIAC, or an advanced cloud security certification
- Experience in a high-growth business-to-business SaaS company and in customer-facing security assurance
Benefits
- Bonus program or commission plan may be included as part of total compensation.
- Stock options if approved by 6sense’s board.
- Generous health insurance coverage.
- Life insurance.
- Disability insurance.
- 401K employer matching program.
- Paid holidays.
- Self-care days.
- Paid time off (PTO).
- Full-time employees can take advantage of health coverage.
- Full-time employees can take advantage of paid parental leave.
- Full-time employees can take advantage of generous paid time-off and holidays.
- Full-time employees can take advantage of quarterly self-care days off.
- Full-time employees can take advantage of stock options.
- Equipment and support to work and connect with teams, at home or in one of our offices.
- Numerous learning and development initiatives, including access to our LinkedIn Learning platform.
- Quarterly wellness education sessions.
- Wellness days.
- ERG-hosted events.
Company Overview
Company H1B Sponsorship