Engineering Manager, Product Security

At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you're a close but not exact match with the description, we hope you'll still consider applying. Want to learn more about life at Klaviyo? Visit careers.klaviyo.com to see how we empower creators to own their own destiny.
Klaviyo is seeking a Product Security Engineering Manager to lead our Product Security team within the Security and Trust organization. This role will support the deployment of secure applications, cater to security-aware customers, and develop internal tools for the Security Operations team to enhance monitoring and respond to security events.
The Product Security Engineering Manager will collaborate with engineering teams across Klaviyo to develop and integrate security solutions within the applications (customer facing and back end), champion and lead the development of secure code libraries, and identify opportunities to improve the Security Operations workflows.
Managerial responsibilities include:

• Create roadmaps for Product Security goals to reduce risk across the platform. OWASP top 10, Secure Code Best Practices, CIS Benchmarks are all used to measure success within Klaviyo.
• Lead a team of engineers to build security centric customer facing features within the product.
• Collaborate with Product, Engineering, Design, Legal, (and other) teams to develop and deploy impactful solutions.
• Mentor engineers and support team members in their technical development and career growth.
• Manage workloads to maintain a balance between high productivity and a healthy work life balance.
• Monitor team performance and provide continuous feedback and conducting regular employee reviews.

Technical responsibilities include:

• Oversight and development of secure code architectures and patterns that enable Klaviyo to efficiently and securely perform transactions on the platform.
• Reduce the reliance on legacy data access patterns by consolidating functionality into centralized, secure libraries.
• Understand core 3rd party solutions such as Django and React; take advantage of new security features within our code base when they are released.
• Work side by side with other Security Operations team members to assist with Detection and Response, Offensive Security, and Infrastructure hardening.
• Hands on implementation of architecture designs and library development within our code base.
• Leverage existing tooling to their fullest ensuring the teams take full advantage of our security investments.

If you are an experienced Product Security Engineer with prior team leadership and/or managed other Product Security Engineers, have a passion for mentoring and sharing your knowledge to team members, have experience with large scale web applications that process billions of transactions across multiple technologies this may be the role for you.
Requirements:

• Prior leadership experience
• 8+ years developing secure code libraries (preferably in Python)
• Have experience with the following or similar technologies
• Python, Django, Nginx, React
• MySQL, RabbitMQ, Redis
• Amazon Web Services (EC2, RDS, Aurora, etc.)
• Terraform, Packer, Jenkins, Kubernetes

The pay range for this role is listed below. Sales roles are also eligible for variable compensation and hourly non-exempt roles are eligible for overtime in accordance with applicable law. This role is eligible for benefits, including: medical, dental and vision coverage, health savings accounts, flexible spending accounts, 401(k), flexible paid time off and company-paid holidays and a culture of learning that includes a learning allowance and access to a professional coaching service for all employees.
Base Pay Range For US Locations:
$192,000 - $288,000 USD
Get to Know Klaviyo
We're Klaviyo (pronounced clay-vee-oh). We empower creators to own their destiny by making first-party data accessible and actionable like never before. We see limitless potential for the technology we're developing to nurture personalized experiences in ecommerce and beyond. To reach our goals, we need our own crew of remarkable creators-ambitious and collaborative teammates who stay focused on our north star: delighting our customers. If you're ready to do the best work of your career, where you'll be welcomed as your whole self from day one and supported with generous benefits, we hope you'll join us.
Klaviyo is committed to a policy of equal opportunity and non-discrimination. We do not discriminate on the basis of race, ethnicity, citizenship, national origin, color, religion or religious creed, age, sex (including pregnancy), gender identity, sexual orientation, physical or mental disability, veteran or active military status, marital status, criminal record, genetics, retaliation, sexual harassment or any other characteristic protected by applicable law.
IMPORTANT NOTICE: Our company takes the security and privacy of job applicants very seriously. We will never ask for payment, bank details, or personal financial information as part of the application process. All our legitimate job postings can be found on our official career site. Please be cautious of job offers that come from non-company email addresses (@klaviyo.com), instant messaging platforms, or unsolicited calls.