Manager, Security Engineering; Enterprise Systems

Manager, Security Engineering (Enterprise Systems) About the opportunity

Candidates must be located in the eastern time zone

Contentful strives to build a secure and safe service and commits considerable effort and resources to security. Our Security team supports organization-wide information security management programs and collaborates closely with internal teams. We believe that Security must be anchored by Dev Ops principles with strong repeatable processes.

We are looking for a committed and driven manager who is passionate about solving complex security problems in innovative and scalable ways.
As a Manager of Security Engineering, you will own security engineering across Contentful’s corporate systems, including the tooling and platforms that support the internal security team. While this role does not own security for the customer facing product, you will partner closely with product security teams within the security organization on shared responsibilities.

You will balance people leadership with hands‑on technical execution, including designing, building, and operating security controls and tooling at scale, with a particular focus on areas such as identity and access management, data security, and SaaS platforms. You will provide strategic guidance and lead initiatives while remaining directly involved in implementation. You may work independently at times, but will more often collaborate closely with security, IT, and cross‑functional partners to align strategies, execute shared initiatives, and ensure comprehensive risk mitigation while minimizing impact on end users across the organization.

• Develop a team, providing coaching, mentorship, goal setting, and performance feedback.
• Define roles and make hiring decisions to grow the team in line with department needs.
• Remain hands on, balancing technical leadership with direct implementation work.
• Own execution and prioritization across projects and operations, using agile delivery practices.
• Scale and mature effectiveness and efficiency by improving processes and tooling.
• Champion continuous improvement across all aspects of the security program.
• Continuously improve effectiveness and efficiency by evolving processes and tooling.
• Communicate risks and technical concepts with clarity to leadership and stakeholders.
• Collaborate with security leadership to execute business aligned, risk reduction roadmaps.
• Shape work scope, sequencing, and success criteria inline with department and company needs.
• Drive security processes, standards, and best practices across information technology assets.
• Partner with stakeholders to evolve security awareness and specialized training across all functions.
• Mature capabilities across endpoint, SaaS, and cloud configuration.
• Own strategy evolution of corporate capabilities, including configuration, IAM, and data security.
• Enhance tooling, automation, and integrations to improve visibility and reduce manual effort.
• Support and guide security incident response efforts as a technical leader.
• Support cross functional vulnerability management while advancing the program capabilities.
• Define and maintain metrics to measure impact, optimize execution, and guide investment.
• Partner with cross-functional teams for security enhancement and drive risk reduction.
• Accelerate adoption of AI, balancing practicality enablement, and risk management.
• Stay current on threats, vulnerabilities, and tactics, translating insights into actionable strategies.

• 8+ years of progressive engineering and security experience.
• 3+ years managing people and security engineering teams.
• Comfort operating in ambiguity, balancing strategic thinking, security, and practicality.
• Expertise with AWS, GCP, and Azure.
• Strong hands‑on experience designing, implementing, and operating security controls at scale.
• Demonstrated experience securing endpoint, SaaS, and cloud environments.
• Experience working within identity and access management and data security programs.
• Hands‑on experience using Terraform and infrastructure‑as‑code.
• Experience applying modern practices to improve efficiency and scalability or security programs.
• Passion…