{"id":726568,"url":"https://alion.io/job/atomicmachines-technical-manager-information-security","title":"Technical Manager, Information Security","company":{"id":668955,"name":"Atomic Machines","domain":"atomicmachines.com","url":"https://alion.io/company/atomicmachines","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":91,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Emeryville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":240000,"max":280000,"currency":"USD","period":"year","gross":null,"usd_annual":280000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NERC CIP","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tines","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-03-10T01:23:52Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-09T02:31:29Z","board_verified":true,"closed_at":null,"days_open":244,"trust":{"level":"stale","repost_count":1,"flags":["stale"],"days_open":243},"description":"Atomic Machines is building the Matter Compiler™, the first in a new class of AI-native, all-digital manufacturing systems that build working machines directly from code. The Matter Compiler (MC) is aimed at micro-machines: motors and gears the size of a grain of sand, robots small enough to work inside the body, cooling built directly into the chips that run AI, and the many devices like them that have been waiting on a way to build them. Its first product is PrimeSwitch™, an electromechanical power relay the size of a button battery that carries 150 amps continuous current and opens in 50 microseconds, about a thousand times faster than a conventional contactor. Founded by Jeff Holden - serial entrepreneur, ex-Amazon SVP and Uber’s first Chief Product Officer - the company has raised $250 million to date.\nAtomic Machines is based in the San Francisco Bay Area, with offices in Emeryville and Santa Clara.\nAbout The Role:\nThis is a broad-responsibility, high-judgment individual contributor role within the IT team. The Technical Manager, Cybersecurity Engineering is a hands-on leadership role responsible for managing the full lifecycle of enterprise cybersecurity tools, technologies, and detection capabilities across a complex hi-tech manufacturing environment. This role bridges strategic security direction with day-to-day technical execution - managing an external team of engineers and security vendors to deliver consistent, scalable protection across cloud, Operational Technology(OT)/Industrial Control Systems(ICS), endpoint, identity, and network domains.\nThe successful candidate will own the detection and response program at a management level, drive AWS security best practices across cloud infrastructure, set technical direction for SIEM and cloud-native security platforms, and embed security into the organization's cloud design, Identity and Access Management (IAM) strategy, and network architecture. This is a critical escalation point for complex incidents and a key voice in shaping security policy, standards, and vendor partnerships.\nThis is a full-time position based in either our Emeryville or Santa Clara office, with occasional work from the other office as needed.\nWhat You’ll Do:\nDay-to-Day\nAdvance the detection and response program at a strategic level, leading coverage across Cloud, SaaS, Endpoint, and Identity domains.\nImplement organization-wide automation approaches that reduce alert fatigue and accelerate response across all security tooling.\nContinuously mature SIEM and cloud-native logging architectures, ensuring a highly functional, cost-aware telemetry pipeline spanning corporate, manufacturing, and engineering environments.\nDefine and implement scalable security controls that strengthen cloud and infrastructure security through detection, configuration standards, and automated enforcement.\nDrive long-term improvements to cloud and infrastructure security posture through measurable, repeatable, and auditable security processes.\nEnsure 24/7 network operational coverage through on-call rotation and escalation protocols.\nSecurity Tool Management\nOwn end-to-end lifecycle management of the enterprise security toolset including, deployment, configuration, tuning, and decommissioning.\nSIEM platforms, Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) tools, vulnerability scanners\nNetwork Traffic Visibility solutions\nManage SIEM operations including data source onboarding, log normalization, correlation rule development, and alert tuning to minimize noise and maximize fidelity.\nDevelop and enforce network device hardening standards across all managed security platforms.\nTeam Leadership and Vendor Management\nLead, mentor, and develop internal technical resources and external security vendors, holding all parties accountable to defined SLAs, quality standards, and security outcomes.\nServe as the primary escalation point for internal team members and external vendor partners during incidents, complex technical issues, and project delivery challenges.\nPartner with managed security service providers (MSSPs) and specialized security vendors to extend team capabilities, conducting regular performance reviews and contract evaluations.\nInfluence and mentor engineers across cross-functional teams, raising the overall bar for detection engineering, automation, and cloud security practices.\nInterface with IT leadership, security management, and vendors to develop and implement new solutions that meet evolving business and regulatory requirements.\nCloud Security and Posture\nDefine and enforce cloud security best practices across all cloud workloads, accounts, and organizational units, including IAM least-privilege, resource policy governance, and guardrail enforcement via SCPs.\nLead implementation and continuous tuning of cloud security services.\nPartner with cloud infrastructure and platform engineering teams to embed security controls into CI/CD pipelines, infrastructure-as-code (IaC) templates, and cloud “landing zone” designs.\nDesign and maintain cloud network security architecture including VPC segmentation, security group standards, PrivateLink, WAF rulesets, and configurations.\nDefine cloud security configuration standards (CIS Benchmarks, Security Best Practices) and implement automated compliance enforcement via controls.\nGovern IAM strategy across cloud environments, enforcing role-based access, MFA requirements, and service control policies.\nNetwork Security\nParticipate in the design and enforcement of network security policies, including firewall rule management, zero-trust network access (ZTNA), network access control (NAC), and micro-segmentation.\nOversee network vulnerability assessments and penetration test scoping; ensure timely remediation and deliver clear risk assessment reports to stakeholders.\nSupport compliance activities (e.g., NIST, SOC 2, ISO 27001, etc.) through network controls documentation, audit evidence, and remediation execution.\nCreate management processes to keep all network equipment current and hardened against known vulnerabilities.\nThreat Detection and Incident Response\nManage the technical direction for threat detection and response capabilities across SIEM, cloud-native security platforms, and adjacent security tooling.\nLead threat-model-driven detection strategy, identifying high-risk attack paths and ensuring detection coverage across cloud, SaaS, endpoint, and identity domains.\nServe as a senior escalation point during complex security incidents, driving technical analysis, coordinating response across teams, and guiding post-incident remediation.\nIdentify systemic gaps in detection coverage, telemetry ingestion, and automation logic; lead cross-team efforts to close gaps at scale.\nImplement and mature playbooks that reduce mean time to detect (MTTD) and mean time to respond (MTTR) across the security operations function.\nAnalyze network traffic, system logs, and cloud telemetry to identify anomalies, confirm threats, and support security controls validation.\nOT/ICS and Manufacturing Security\nConduct operational technology (OT) cybersecurity assessments, identifying risks, potential impacts, and prioritized remediation recommendations.\nDesign and support implementation of network segmentation strategies for OT/IT convergence environments, including segmented Industrial Control System networks.\nCollaborate with internal engineering and operations teams to assess security posture without disrupting production operations.\nIdentify and implement appropriate remote and local access controls for manufacturing systems.\nArchitecture and Engineering Standards\nOwn, develop, and maintain architectural standards including reference architectures, data flow diagrams, detection pipeline operating models, and security design patterns.\nDesign cybersecurity solutions supporting network segmentation, remote and local access controls, and advanced intrusion detection/prevention systems.\nPartner with IT infrastructure, platform, and engineering teams to ensure security is embedded into cloud design, IAM strategy, and network architecture from inception.\nDrive long-term improvements to cloud and infrastructure security posture through scalable detection, configuration standards, and automation.\nFulfill project requests to support management and mitigation of vulnerabilities across the enterprise environment.\nPolicy, Compliance and Governance\nDevelop, maintain, and communicate security policies, plans, and procedures in alignment with applicable regulatory requirements (NIST, SOC 2, ISO 27001, as applicable).\nProvide administrative-level technical oversight across network security operations, ensuring audit-readiness and evidence collection for compliance assessments.\nProduce clear, stakeholder-ready risk articulations for identified vulnerabilities and architectural weaknesses, including impact assessments and recommended mitigations.\nWhat You’ll Need:\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or related technical field. Equivalent combination of education and experience considered.\n8+ years of progressive cybersecurity engineering experience, with at least 2-3 years in a technical lead or people management capacity.\nDemonstrated experience managing both internal security engineers and external vendors/MSSPs, with accountability for security outcomes and SLA adherence.\nHands-on expertise with enterprise SIEM platforms (Splunk, Sentinel, Chronicle, or equivalent) including detection rule authoring, data onboarding, and operational tuning.\nDeep working knowledge of AWS security services: Security Hub, GuardDuty, CloudTrail, Config, IAM, Macie, Inspector, VPC security architecture, and SCPs.\nExperience conducting OT/ICS cybersecurity assessments in manufacturing, industrial, or critical infrastructure environments is strongly preferred.\nFamiliarity with threat modeling frameworks (MITRE ATT&CK, STRIDE) and their application to cloud and OT environments.\nExperience developing security automation using SOAR platforms (Palo Alto XSOAR, Splunk SOAR, Tines, or equivalent) and scripting (Python, PowerShell).\nCISSP or CISM, AWS Certification, CompTIA Security+, GIAC, GCIA, GCIH, Palo Alto PCNSE or Splunk Certified Architect, etc\nTechnical Skills:\nSIEM / Detection: Splunk ES, Microsoft Sentinel, Rapid 7, Palo Alto - rule authoring, data onboarding, correlation tuning\nAWS Security: Security Hub, GuardDuty, CloudTrail, Config, Macie, Inspector, WAF, IAM, SCPs, VPC security architecture, AWS Organizations\nSecurity Tools: Firewalls, IDS/IPS, SIEM (Rapid7/Splunk/Palo Alto), NAC (Cisco ISE/Aruba ClearPass), Vulnerability Scanners\nCloud IAM: AWS IAM, Okta, Azure AD/Entra ID, PAM (CyberArk/BeyondTrust) - identity governance and least privilege\nOT/ICS Security: Dragos, Claroty, or Nozomi - OT visibility; Purdue model, IEC 62443, NERC CIP awareness\nThe compensation for this position also includes equity and benefits.\nSalary Range\n$240,000—$280,000 USD\n Atomic Machines is an equal opportunity employer that values diversity and does not discriminate based on characteristics protected by applicable law. We are committed to an inclusive interview experience, including for individuals with disabilities. To request an accommodation, contact . To help our recruiting team manage application volume and respond to candidates more efficiently, Atomic Machines may use AI-assisted tools.","description_format":"text","description_chars":11473,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Industrial Machinery","Information Security","Precision Engineering"],"lifecycle":[{"event":"open","at":"2026-09-11T08:36:30Z"},{"event":"close","at":"2026-10-06T19:04:22Z"},{"event":"reopen","at":"2026-11-05T06:20:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 6","filings_12m":6,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.488,"p_room":0.28,"age_days":244,"expected_fill_days":91,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":280000,"is_top_pay":true},"html_url":"https://alion.io/job/atomicmachines-technical-manager-information-security","json_url":"https://alion.io/job/atomicmachines-technical-manager-information-security.json","meta":{"generated_at":"2026-11-09T06:35:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2946,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668955},"rest":"https://alion.io/mcp/rest/get_company?id=668955"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatomicmachines-technical-manager-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatomicmachines-technical-manager-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatomicmachines-technical-manager-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atomicmachines-technical-manager-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatomicmachines-technical-manager-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":726568}},{"tool":"search_jobs","arguments":{"company":"atomicmachines.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":726568},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}