Manager, Security

TriNet is a leading provider of comprehensive human resources solutions for small to midsize businesses (SMBs). We enhance business productivity by enabling our clients to outsource their HR function to one strategic partner and allowing them to focus on operating and growing their core businesses. Our full-service HR solutions include features such as payroll processing, human capital consulting, employment law compliance and employee benefits, including health insurance, retirement plans and workers’ compensation insurance. 

TriNet has a nationwide presence and an experienced executive team. Our stock is publicly traded on the NYSE under the ticker symbol TNET. If you’re passionate about innovation and making an impact on the large SMB market, come join us as we power our clients’ business success with extraordinary HR. 

Don't meet every single requirement? Studies have shown that many potential applicants discourage themselves from applying to jobs unless they meet every single requirement. TriNet always strives to hire the most qualified candidate for a particular role, ensuring we deliver outstanding results for our small and medium-size customers. So if you're excited about this role but your past experience doesn't align perfectly with every single qualification in the job description, nobody’s perfect – and we encourage you to apply. You may just be the right candidate for this or other roles.                   

JOB SUMMARY/OVERVIEW

The position manages the Product Security Program, encompassing both product security and application security domains. As Manager, you will manage a team and support the execution of secure software delivery, champion DevSecOps practices, and collaborate closely with engineering and product teams to embed security throughout every phase of the software development lifecycle (SDLC).

ESSENTIAL DUTIES/RESPONSIBILITIES

• Support and execute the Product Security Program, helping to set strategy and execution plans. 
• Drive implementation of security-by-design principles into technology platforms and development workflows. 
• Manage and develop a high-performing security team focused on secure software development, threat modeling, and secure architecture. 
• Provide day-to-day people leadership, coaching team members to drive growth, accountability, and cross-functional collaboration. 
• Support the development, implementation, and continuous improvement of secure coding standards, threat modeling frameworks, and security architecture reviews. 
• Support the adoption of cloud-native security, software supply chain controls, and modern DevSecOps practices across all development environments. 
• Partner with leaders and cross-functional teams across engineering, DevOps, and product teams to influence product roadmaps and the integration of security into CI/CD pipelines. 
• Oversee vulnerability management, code scanning, and remediation processes for all software products and applications. 
• Manage the implementation and effective use of security tooling and automation, including SAST, DAST, container scanning, and secrets management. 
• Manage security training and awareness initiatives for developers and product managers. 
• Track and report on key metrics (KRIs/KPIs) to key stakeholders that inform executive decisions and demonstrate program effectiveness. 
• Monitor emerging threats and ensure proactive defenses are in place to protect our software assets. 
• Promote a culture of continuous improvement, learning, and inclusion within the security program. 
• Manage identified security issues and vulnerabilities, prioritizing remediation and driving timely response actions to strengthen defense posture and reduce exposure.
• Testing & Assurance:
  • Coordinate: Penetration testing, Security testing and validation. Manage remediation of findings
  • Perform other duties as assigned.
  • Comply with all policies and standards.

JOB REQUIREMENTS AND QUALIFICATIONS

Education: 

• Bachelor's Degree or equivalent experience preferred in Computer Science, Engineering, or Cybersecurity.

Training Requirements (licenses, programs, or certificates):

• Relevant certifications (e.g., CISSP, CSSLP, OSCP) are a plus.

Experience: 

• 10+ years of work experience in product security or related field;  including 5+ year of experience leading or managing a team.
• Proven track record building and scaling secure software programs for SaaS, microservices, APIs, and cloud-native architectures. 
• Deep understanding of secure software development, OWASP, threat modeling, BSIMM, and modern DevSecOps practices. 
• Experience with security tools such as SAST, DAST, IAST, container scanning, secrets management, and supply chain security. 
• Experienced in operating within a global environment, collaborating across distributed teams.

Other Knowledge, Skills and Abilities: 

• Strong executive presence and stakeholder management skills. 
• Excellent verbal and written communication, including presentation and facilitation skills. 
• Ability to communicate and influence at all levels of the organization. 
• Strong analytical and problem-solving skills. 
• Thorough, detail-oriented, and quality-driven. 
• Demonstrated commitment to high professional ethical standards and a diverse workplace.

Work Environment

• Work in a clean, pleasant, and comfortable office work setting. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable persons with disabilities to perform the essential functions. 
• This position is 100% in office.