Be an Early Applicant
Whoever you are, whatever you do, however you work. Make it mean something at iManage.
The Role
Lead product security improvements across global engineering teams by embedding security into the SDLC. Responsibilities include threat modeling, architecture and code reviews, cloud and data security assessments, vulnerability remediation, compliance risk analysis, security training, metrics development, and communicating application security posture. The role also mentors engineers and security champions while supporting Zero Trust architecture and continual improvement of security testing practices.
Summary Generated by Built In
We offer a flexible working policy that supports a healthy balance between personal and professional well-being. This role requires in-office presence on Tuesdays & Thursdays to collaborate, connect, and learn from peers - while also maintaining the flexibility for meaningful work-life balance.
Being a Principal Product Security Engineer at iManage Means…
You will join this team of security engineers that will guide the global engineering teams on security considerations as well as assess and improve product security at iManage. We operate on a Zero-Trust approach, so you will play an integral role in the continued maintenance and maturity of our Zero-Trust architecture. Our focus is to ensure that our engineers ship secure code and infrastructure, and we want your help to do it. You are passionate about technology and willing to work with industry security perspectives including threat modeling, architecture review, dynamic code review, static code reviews, cloud assessments, data security assessments, runtime/event security, adherence to compliance as well as red team/blue team/purple team activities.
Here is what one of our leaders, Head of Product Security (Jeff LaFrate), has to say about the role: “You will work on a product security team supporting continual improvement while leveraging a wide range of industry best practices. You will work both independently and collaboratively with a global team of engineers to deliver quality, hardened, industry leading enterprise solutions. Your contributions will be noticed, impactful and rewarding.”
iM Responsible For…
iM Getting To…
iManage is committed to providing an excellent candidate experience and will never ask you to engage in recruitment activity via text and exclusively communicates from emails using the @imanage.com domain. If you have any concerns or questions about communications you have received, please send them to [email protected] so our team members can review.
About iManage…
At iManage, we are dedicated to Making Knowledge Work™. Our intelligent, cloud-enabled, and secure platform is trusted by 4,100+ customers and 430,000 users worldwide, managing over 11 billion documents and 11 petabytes of data. We empower professionals across 65+ countries to unlock the full potential of their business content and communications.
We are continuously innovating to solve the most complex professional challenges and enable better business outcomes; Our work is not always easy but it is ambitious and rewarding.
So we’re looking for people who embrace challenges. People who thrive on solving problems, pushing
boundaries, and collaborating with the industry’s best and brightest. That’s the iManage way. It’s how we turn the impossible into reality, empower our employees to grow, unlock their potential, and create a meaningful impact on everything we do.
Whoever you are, whatever you do, however you work. Make it mean something at iManage.
iManage provides equal employment opportunities to all employees and applicants for employment and
prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Learn more at: www.imanage.com
Please see our recruitment privacy statement for more information on how we handle your personal data.
#LI-Hybrid
#LI-LM1
Being a Principal Product Security Engineer at iManage Means…
You will join this team of security engineers that will guide the global engineering teams on security considerations as well as assess and improve product security at iManage. We operate on a Zero-Trust approach, so you will play an integral role in the continued maintenance and maturity of our Zero-Trust architecture. Our focus is to ensure that our engineers ship secure code and infrastructure, and we want your help to do it. You are passionate about technology and willing to work with industry security perspectives including threat modeling, architecture review, dynamic code review, static code reviews, cloud assessments, data security assessments, runtime/event security, adherence to compliance as well as red team/blue team/purple team activities.
Here is what one of our leaders, Head of Product Security (Jeff LaFrate), has to say about the role: “You will work on a product security team supporting continual improvement while leveraging a wide range of industry best practices. You will work both independently and collaboratively with a global team of engineers to deliver quality, hardened, industry leading enterprise solutions. Your contributions will be noticed, impactful and rewarding.”
iM Responsible For…
- Creating best practices, metrics and mechanisms to improve security testing methodologies within a SDLC.
- Analyzing emerging trends, news and changes in threat and compliance environment with respect to organizational risk.
- Advising organization management while developing and executing plans for compliance and mitigation of risk.
- Developing and communicating security training material for engineering and security champions.
- Mentoring team members, striving to consistently learn and improve within the company as well as sharing knowledge with colleagues.
- Communicating the security posture of applications and deployment environments internally to the organization and externally to customers of the system.
- A bachelor’s degree or higher in computer science or related field.
- 7-10+ years of relevant work experience.
- Extensive experience assessing risk and providing remediation guidance for vulnerabilities detected in one or more of the following perspectives:
- SAST, SCA, DAST, host/container security, IaC, platform security, manual pen testing, cloud configuration, network security, data security, API security and CI/CD process
- Extensive experience of best practices, metrics and mechanisms to improve security testing methodologies.
- Proven experience and understanding of multi-tier web application architecture patterns.
- Extensive experience with software development practices, tooling and technologies.
- Curiosity and a desire to improve customer experience, reduce risk, improve methods and prepare for new threats.
- Ability and desire to communicate with colleagues to strategize and implement continual improvement through industry best practices, threat modeling and vulnerability triage.
- In-depth understanding of “OWASP Top 10” risks like injection, XSS, CSRF, etc.
- Understanding of data classification and data security control implementations.
- Extensive experience with common cloud security controls and best practices.
- Experience with measuring software security programs using BSIMM, SAMM, ASVS frameworks.
iM Getting To…
- Join a rapidly evolving, industry-leading SaaS company on an exciting journey of growth and scalability!
- Take on meaningful, high-impact challenges by leveraging cutting-edge technologies and best-in-class protocols to drive innovation.
- Own my career path with our internal development framework. Ask us more about this!
- Expand my skill set and earn certifications with unlimited access to LinkedIn Learning courses and interactive Microsoft courses & training.
- Be part of a supportive and experienced team within a dynamic, inclusive, and encouraging culture.
- Enjoy flexible work hours that empower me to balance personal time with professional commitments.
- Collaborate in a modern, open-plan workspace featuring a gaming area, free snacks and drinks, and regular social events.
- Creating an inclusive environment where I can help shape the culture not just by fitting in, but by adding to it.
- Providing a market competitive salary that is applied through a consistent process, equitable for all our employees, and regularly reviewed based on industry data.
- Rewarding me with an annual performance-based bonus.
- Offering comprehensive Health/Vision/Dental/Life Insurance, and a 401k Retirement Savings Plan with a company match up to 4%.
- Granting enhanced leave for expecting parents; 20 weeks 100% paid for primary leave, and 10 weeks 100% paid for secondary leave.
- Providing me with a flexible time off policy to take the time off that I need. Be it for vacation, volunteering, celebrating holidays, spending time with family, or simply taking time to recharge and reset.
- Having multiple company wellness days each year to prioritize mental health and well-being.
- Providing access to RethinkCare, a global behavioral health platform that enhances personal well-being, strengthens professional resilience, and empowers parental success through expert-led training and resources.
iManage is committed to providing an excellent candidate experience and will never ask you to engage in recruitment activity via text and exclusively communicates from emails using the @imanage.com domain. If you have any concerns or questions about communications you have received, please send them to [email protected] so our team members can review.
About iManage…
At iManage, we are dedicated to Making Knowledge Work™. Our intelligent, cloud-enabled, and secure platform is trusted by 4,100+ customers and 430,000 users worldwide, managing over 11 billion documents and 11 petabytes of data. We empower professionals across 65+ countries to unlock the full potential of their business content and communications.
We are continuously innovating to solve the most complex professional challenges and enable better business outcomes; Our work is not always easy but it is ambitious and rewarding.
So we’re looking for people who embrace challenges. People who thrive on solving problems, pushing
boundaries, and collaborating with the industry’s best and brightest. That’s the iManage way. It’s how we turn the impossible into reality, empower our employees to grow, unlock their potential, and create a meaningful impact on everything we do.
Whoever you are, whatever you do, however you work. Make it mean something at iManage.
iManage provides equal employment opportunities to all employees and applicants for employment and
prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Learn more at: www.imanage.com
Please see our recruitment privacy statement for more information on how we handle your personal data.
#LI-Hybrid
#LI-LM1
Skills Required
- Bachelor's degree or higher in computer science or a related field
- 7-10+ years of relevant work experience
- Extensive experience assessing risk and providing remediation guidance for vulnerabilities across application, cloud, infrastructure, network, data, API, and CI/CD security
- Extensive experience improving security testing methodologies, best practices, metrics, and mechanisms
- Proven understanding of multi-tier web application architecture patterns
- Extensive experience with software development practices, tooling, and technologies
- Understanding of threat modeling and vulnerability triage
- In-depth understanding of OWASP Top 10 risks, including injection, XSS, and CSRF
- Understanding of data classification and data security control implementations
- Extensive experience with common cloud security controls and best practices
- Experience measuring software security programs using BSIMM, SAMM, and ASVS frameworks
What the Team is Saying
Jane
Senior Manager of Quality Engineering
Bayardo
Engineering Manager
Lindsey
Senior Manager of Support Operations and Innovations
Suyash
Senior Principal Data Architect
Sandhya
Lead Data Scientist
.jpg)
Sam
Principal Knowledge Engineer
Grace
Senior Manager of Cloud Renewals Program
Mark
Director of Engineering
Brian
Senior Director of Customer Experience
Thomas
Senior Site Reliability Engineer
Jing
Staff Software Engineer
Stew
Director of Engineering
Nick
Senior Manager of GTM Operations
Neil
CEO
Neil
CEO and Co-founder
Amy
Chief People Officer
Sarah
Sr. People Technology Specialist
Sarah
Sr. People Technology Specialist
Zia
Chief Architect
Zia
Chief Architect
.jpg)
iManage Compensation & Benefits Highlights
-
Leave & Time Off Breadth — Time off is described as flexible through the iMAway policy that replaces traditional accruals across international operations, with wellness days and unlimited sick time also mentioned. This flexibility is positioned as a distinctive part of the total rewards experience.
-
Parental & Family Support — Policies are presented as gender-neutral and robust for both primary and secondary caregivers, with added coverage for bereavement and pregnancy loss. Company materials also reference strong utilization and support for returning to work.
-
Healthcare Strength — Offerings include comprehensive medical, dental, and vision coverage alongside expanded mental-health and EAP resources for employees and household members. Tools such as counseling/coaching, healthcare concierge, and wellbeing programs reinforce breadth.
iManage Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
iManage is dedicated to Making Knowledge Work. Over one million professionals across 65+ countries rely on our intelligent, cloud-enabled, secure knowledge work platform to uncover & activate the knowledge that exists inside their business content and communications. We are continuously innovating to solve the most complex professional challenges & enable better business outcomes. Our work is not always easy but it is ambitious & rewarding. We are a people-first company where our employee's wellbeing is our #1 priority! That’s why we offer generous paid time off, private benefit packages that include Health/Vision/Dental/Life, plus our employee assistance program (EAP) and HealthyMinds app to support your mental health and wellbeing. We realize that work is more than just a paycheck; it’s an important part of living and growing. We strive to have a positive impact on families and a commitment to creating an organization where everyone can thrive. We’re on a mission to foster an environment where everyone makes progress, innovates, and comes together as part of a best-in-class workplace. Everyone at iManage plays an important part in achieving our vivid future.
Why Work With Us
We’re looking for people who love a challenge. People who are happiest when they’re working hard, solving problems, and collaborating with the industry’s best and brightest. In exchange, we’ll make sure the work you do here is worth doing. That’s the iManage way. It’s how we do things that might appear impossible.
Gallery
iManage Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We provide flexibility for our employees to have a meaningful work-life balance as remote workers, & an option to work from 1 of 7 global offices
Typical time on-site:
0 days a week
