Security Engineering Manager

Security Engineering Manager

San Francisco, California, United States

Reporting to the Infrastructure Director of Engineering, you are a pragmatic security leader who acts as a business enabler rather than a gatekeeper. You thrive in a high-velocity, non-regulated environment where you must define "what good looks like" from scratch and drive security progress with a blend of strong planning skills and strong cross-functional partnerships.

You are a technical player-coach who manages the "how" behind engineering initiatives, providing direct guidance to a lean team which needs to navigate trade-offs between quality, depth, and delivery volume. You are just as comfortable planning core initiatives as you are writing a proposal for security program improvements. You have a proven track record of leading a team to achieve compliance with a security framework from scratch (e.g., CIS, SOC2, PCI-DSS, ISO
27001). Above all, you are a data-oriented communicator who uses relationship building to hold our security bar to a high standard for our customers and partners.

• Lead and develop a team of security engineers, acting as a technical player-coach to manage deliverables, mentorship, and continuous learning. Lead the team through prioritization and tradeoffs to determine which initiatives provide the most meaningful impact.
• Integrate foundational security tooling and automation across corporate, infrastructure, and application layers. Working closely with engineering teams, IT, legal and compliance.
• Develop data-driven security strategies, including OKRs, KPIs, and roadmaps, using clear written communication to advocate for security priorities during cross-functional planning.
• Manage compliance with security frameworks (e.g. CIS, SOC2, GDPR), designing sustainable controls in partnership with internal teams.
• Lead pragmatic incident response efforts, focusing on investigation and resolution while continuously maturing our response plans and threat modeling.
• Develop and implement security strategies for AI and machine learning integrations, ensuring safe adoption while mitigating associated risks.
• Drive cultural change through education, acting as a security evangelist to help cross-functional partners understand risk and own security within their respective domains.
• Govern the Information Security Program, developing high-quality proposals and recommendations that align security decisions with Taskrabbit's innovative business goals.

• 5+ years of experience building and managing security teams in an agile, high-growth environment.
• Proven track record of achieving a security framework from scratch (e.g., taking a company through its first SOC2 or ISO 27001 certification).
• Strong technical "Player-Coach" ability, with the comfort level to dive into technical initiatives and provide direct guidance to security engineers.
• Exceptional written and verbal communication skills, with a knack for telling the "story" of security through formal proposals, strategies, and risk presentations.
• Pragmatic
  
  Risk Management:
  
  Ability to handle moderate risk tolerance by focusing on business impact and customer trust rather than theoretical perfection.
• Analytical and data-oriented mindset, with experience designing metrics and KPIs that demonstrate the business value of security initiatives.
• Expertise in influence-based leadership, showing a history of driving security maturity in non-regulated industries through relationship building and alignment.
• Deep knowledge of modern security practices, including cloud security, access controls, and secure software development, with experience leading incident response.
• Extensive experience working with one or more security frameworks (e.g. CIS, SOC2) and regulatory compliance standards (e.g. GDPR).
• Experience with security governance for AI/ML systems and a proactive approach to managing the risks inherent in emerging technologies.
• Experience with security tooling implementation:
  Direct experience implementing or leading the implementation of comprehensive security tooling

At Taskrabbit, our approach to compensation is…