Security Platform Engineering Manager

Join CMC Markets as a Security Platform Engineering Manager. In this role, you will lead the development and operation of reusable security capabilities, embedding security controls into infrastructure, CI/CD pipelines, and service templates. You will work closely with various engineering teams to reduce risk through automation and consistency. The position combines technical leadership with hands-on engineering, and you will be responsible for shaping the roadmap, forming the team, driving adoption, and ensuring security becomes a scalable and measurable capability.

• Defining, building, and operating a portfolio of reusable security capabilities that can be consumed by engineering squads as part of product delivery.
• Leading a small team responsible for delivering security capabilities as reusable platform “products” and driving adoption across build and run squads.
• Engaging and collaborating with internal customers to understand up-and-coming use cases for the security platform, and delivering hands-on contributions to the platform.
• Building and operating security capabilities at scale to support product development
• Managing services required to deliver secure applications such as firewalls, package management and secrets management
• Deep understanding of IAM, least privilege access design and secure service to service communication patterns
• Enforcing security standards on Infrastructure as Code (e.g. via Policy as Code)
• Securing cloud native workloads, ideally within AWS and serverless architectures
• Leading team technical delivery in a cross functional environment with multiple stakeholder groups
• Integrating security controls into CI/CD pipelines, preferably using GitHub Actions
• Ability to translate regulatory or security policy requirements into practical, automated engineering controls
• Experience writing Terraform to configure and manage security tooling and services
• Experience with GitHub Advanced Security features such as code scanning, dependency review and secret scanning
• Experience in developing hardened golden image pipelines for containers and virtual machines
• Experience integrating Wiz or similar CNAPP tools into developer workflows
• Experience delivering identity or access management capabilities as shared internal services
• Experience operating in a Platform Engineering model supporting build and run squads in a regulated environment