{"id":2802966,"url":"https://alion.io/job/jeavio-security-engineering-manager","title":"Security Engineering Manager","company":{"id":2993519,"name":"Jeavio","domain":"jeavio.com","url":"https://alion.io/company/jeavio","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vadodara, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":75000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":27},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"Claude Code","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"Semgrep","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"CI/CD","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NIST CSF","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-07-27T06:04:29Z","employer_posted_date":null,"last_verified_at":"2026-07-27T06:04:29Z","board_verified":false,"closed_at":null,"days_open":83,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":83},"description":"Jeavio is a technology services company that specializes in providing innovative solutions to businesses.\n\nWe work at the intersection of technology and business, helping organizations leverage cutting-edge tools, including AI, to drive growth and efficiency.\n\nYou will build and lead a small, high-impact team; embed security thinking into every phase of the SDLC; and serve as a trusted advisor to engineering leads, engineering managers, and customers as we scale our AI-assisted development practices and deepen our commitments to HIPAA, SOC 2, PCI-DSS, and ISO 27001 compliance.\n\nThis is a hands-on management role you will write policies and threat models, run audits, and keep your own technical skills sharp, while also coaching and growing your team.\n\nKey Responsibilities :\n\nSecure Development Practice & Standards :\n\n- Define, document, and enforce a company-wide Secure Software Development Lifecycle (SSDLC) aligned to OWASP, NIST, and similar cloud-native security frameworks.\n\n- Develop and maintain security policies, coding standards, and guardrails tailored to healthcare (HIPAA), financial (PCI-DSS), SOC 2, and ISO 27001 requirements.\n\n- Drive threat modelling, security architecture reviews, and design-level risk assessments for new projects and major feature releases.\n\n- Champion security-by-design across cloud-native (AWS, Azure, GCP) environments including IaC, container security, API security, and secrets management.\n\nAI-Assisted Development Security :\n\n- Establish guidelines and controls for the secure use of AI coding assistants (GitHub Copilot, Claude Code, Cursor etc.) across engineering teams, covering data leakage, IP exposure, and code quality risks.\n\n- Assess and mitigate security risks specific to LLM-integrated products built for customers including (but not limited to) prompt injection, model abuse, and insecure output handling (OWASP LLM Top 10).\n\n- Stay ahead of the rapidly evolving AI security threat landscape and translate findings into actionable team guidance.\n\nTesting, Audits & Assurance :\n\n- Own the application security testing programme : SAST, DAST, SCA, penetration testing, and red team exercises both for internal tooling and customer deliverables.\n\n- Conduct and coordinate security audits and readiness assessments against SOC 2, ISO 27001, PCI-DSS, and HIPAA controls.\n\n- Manage vulnerability disclosure and triage processes; define SLAs for remediation and track them to closure.\n\n- Produce clear, executive-ready security reports for internal leadership and customer stakeholders.\n\nTeam Leadership & Culture :\n\n- Hire, mentor, and develop a team of 2 - 5 security engineers and analysts; set clear goals and foster a culture of continuous learning.\n\n- Design and deliver security awareness and secure coding training programmes for the broader engineering organisation.\n\n- Partner with engineering managers and engineering leads to embed security reviews and checkpoints into project delivery workflows.\n\n- Act as the primary point of contact for security-related customer inquiries, audits, and due diligence requests.\n\nSecurity & Compliance Responsibilities :\n\nAs part of our commitment to ISO 27001 certification, the candidate must :\n\n- Secure Data Handling : Ensure secure data handling practices, including robust encryption at rest and in transit, and strictly managed access controls.\n\n- Leakage Prevention : Design and build secure data pipelines specifically engineered to prevent data leakage.\n\n- Policy Adherence : Strictly follow all data privacy, governance, and organizational ISO 27001 policies.\n\n- Risk Management : Continuously monitor, log, and manage potential security risks within all data systems.\n\n- Audit Readiness : Support audit readiness initiatives and uphold rigorous data protection standards.\n\nRequired Qualifications :\n\n- 8+ years of experience in application security, software security engineering, or a closely related field, with at least 2 years in a team lead or management capacity.\n\n- Deep hands-on expertise in application security testing tools and techniques : SAST (e.g. Semgrep, Checkmarx), DAST (e.g. OWASP ZAP, Burp Suite), SCA, and penetration testing.\n\n- Proven experience designing and implementing SDLCs and security programmes within a software services or product engineering environment.\n\n- Strong working knowledge of cloud-native security across AWS, Azure, and/or GCP including IAM, network security, container/Kubernetes security, and secure IaC (Terraform, CDK).\n\n- Practical experience with HIPAA, PCI-DSS, SOC 2, and ISO 27001 frameworks not just awareness, but hands-on involvement in audits or certifications.\n\n- Solid grasp of secure coding principles across modern stacks (web, API, mobile) and the ability to conduct meaningful code reviews.\n\n- Excellent written and verbal communication skills; able to translate technical risk into business impact for non-technical audiences.\n\nPreferred Qualifications :\n\n- Relevant certifications such as CISSP, CISM, OSCP, CEH, AWS Security Specialty, or CCSP.\n\n- Experience securing AI/ML pipelines and LLM-powered applications; familiarity with OWASP LLM Top 10 and MITRE ATLAS.\n\n- Background working in a software development services / consulting environment, managing security across multiple simultaneous customer engagements.\n\n- Exposure to DevSecOps toolchains CI/CD pipeline security gates, secrets scanning, container image scanning, and policy-as-code.\n\n- Familiarity with security frameworks beyond compliance: MITRE ATT&CK, NIST CSF, CIS Benchmarks.\nSkills\nSecurity, Engineering Management, OWASP, Threat Modeling, Security Operations Center, Applications Security, Vulnerability Management, Security Tools, SAST, DAST, CISSP","description_format":"text","description_chars":5714,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-18T01:22:52Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.467,"p_room":0.28,"age_days":83,"expected_fill_days":26,"reasons":["seen:83","win:tail","crowd:"],"computed_at":"2026-10-18T19:44:01Z"},"pay":null,"html_url":"https://alion.io/job/jeavio-security-engineering-manager","json_url":"https://alion.io/job/jeavio-security-engineering-manager.json","meta":{"generated_at":"2026-10-18T19:44:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23729,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2993519},"rest":"https://alion.io/mcp/rest/get_company?id=2993519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjeavio-security-engineering-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjeavio-security-engineering-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjeavio-security-engineering-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jeavio-security-engineering-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjeavio-security-engineering-manager"}]}