Technical Program Manager, Security

Fivetran + dbt is building data pipelines to power the modern data stack. We are looking for a high-performance, experienced hands-on technical program manager (TPM) in the security domain to lead and manage security-related initiatives across the organization. This is a full-time position based out of our Oakland, CA office with a hybrid work model (2 days in office per week).

• Execute the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities.
• Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched.
• Provide technical oversight and accountability for security fixes.
• Enhance processes by evaluating tools, recommending improvements, and driving automation.
• Use AI in defining the roadmap for a proactive security approach based on risk assessment.
• Run the dependency management and image hardening programs.
• Use AI to contribute to remediation of code and infrastructure vulnerabilities.
• Establish and lead a code scanning program.
• Dedicate up to 20% of time to assessing business systems for vulnerabilities and compliance gaps.
• Develop scanning and detection plans and establish policies for internal data access tools.
• Advocate for shift-left strategies.

• Over 5 years of experience in technical program management with a focus on security engineering, vulnerability management, cloud security, and application security.
• Proficient in program management methodologies.
• Exceptional prioritization, organization, and multitasking skills.
• Proven ability to collaborate with cross-functional teams.
• Deep understanding of security domains including application/infrastructure security, data privacy, threat modeling, vulnerability management, and secure SDLC.
• Strong grasp of security concepts: network security, encryption, authentication, authorization.
• Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS, and automation tools.
• Experience with scripting languages for automation.
• Proficient in researching and validating vulnerabilities.
• Strong familiarity with OWASP principles and ASVS.
• Up-to-date knowledge of cloud security trends.
• Strong analytical, problem-solving, and communication skills.

Python, JavaScript, BigQuery, Looker, AWS, GCP, Azure, Terraform, Docker, Kubernetes, and GitHub.

Oakland Pay Range: $158,284—$197,855 USD

• 100% employer-paid medical insurance
• RSU stock grants
• Monthly cell phone stipend
• Mental health support platform