Technical Program Manager, Security

About the Role

Fivetran + dbt is building data pipelines to power the modern data stack for thousands of companies.

We’re looking for a high-performance, experienced hands-on technical program manager(TPM) in the security domain to be part of an Engineering team. In this role, you will be responsible for leading and managing security-related initiatives across the organization. It involves collaborating with cross-functional teams to ensure the successful planning, execution, and delivery of security programs. The TPM will act as a bridge between technical teams and business stakeholders, ensuring alignment with organizational goals while mitigating security risks.

The work is very diverse. Fivetran is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools, implement improvements within our environments, and assist in developing new processes to increase our security posture.

This is a full-time position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team.

What You’ll Do

• This is the primary person in engineering responsible for executing the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities.
• Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched. Provide technical oversight and accountability to ensure the effective delivery of security fixes.
• Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution.
• Usage of AI in defining the roadmap for a proactive security approach based on risk assessment/rating
• Running the Dependency management and image hardening programs
• Using AI to contribute to the remediation of code and infrastructure vulnerabilities
• Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices.
• Dedicate up to 20% of the time to assessing business systems to identify vulnerabilities and compliance gaps proactively. Develop a scanning and detection plan and establish policies and standards for internal data access tools to improve overall system security.
• Advocate for tools and solutions that support shift-left strategies, driving early integration of security and testing in the development lifecycle.