{"id":2003556,"url":"https://alion.io/job/plenful-senior-manager-manager-security","title":"Senior Manager / Manager, Security","company":{"id":6924,"name":"Plenful","domain":"plenful.com","url":"https://alion.io/company/plenful","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":225000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":3691},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Function Calling","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tool Use","optional":false},{"name":"AI Agents","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-07T12:04:37Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-14T06:25:37Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About Plenful\nPlenful is on a mission to transform healthcare operations from the inside out. Fresh off our $50M Series B and backed by Notable Capital, Bessemer Venture Partners, TQ Ventures, Susa/Kivu Ventures, and other leading investors, we’re building the category-defining AI automation platform that healthcare teams rely on to operate smarter, faster, and more efficiently. Our technology empowers healthcare operators across hospital and health systems, pharmacies and payors to eliminate manual work, reduce administrative burden, and improve compliance, all while unlocking critical revenue to fund programs for their in-need patient populations.\nBuilt by healthcare operators for healthcare operators, Plenful is driven by a deep understanding of the challenges facing today’s care teams. We’re passionate about equipping healthcare workers with world-class tools that deliver real, measurable impact, and we’re proud to serve 100+ leading health systems, pharmacies, and healthcare organizations across the country. If you’re excited to help shape the future of healthcare, we’d love to meet you. Apply now to join our growing team.\nThe Opportunity\nThis is an opportunity to lead and execute security at one of healthcare's fastest-growing AI companies.\nAs Senior Manager / Manager, Security, you will own and help mature security across the company-from product and application security to cloud infrastructure, corporate security, governance, compliance, incident response, and customer trust. You will set priorities, implement the right tooling and processes, lead a small team, and partner across Engineering, Product, IT, Legal, Compliance, Sales, and Executive Leadership.\nThis is also a hands-on role. You will work directly with engineers to identify, prioritize, and remediate vulnerabilities; improve secure development practices; strengthen detection and incident response; and implement security tooling and automation. We are looking for a builder who thrives in ambiguity, can set direction, and is equally comfortable reviewing application code, investigating an incident, implementing controls, supporting customer discussions, and communicating security risk to leadership.\nWhat You Will Do\nLead and Execute the Security Program\nDefine and execute a pragmatic security roadmap aligned with Plenful's product and business priorities.\n\nLead a small security team and coordinate security work across Engineering, Product, IT, Legal, and Compliance.\n\nPersonally own and execute critical security work while building scalable processes and automation.\n\nPrioritize security risks based on exploitability, business impact, customer commitments, and regulatory requirements.\n\nCreate security processes that support rapid product development without slowing innovation.\n\nProduct and Application Security\nEstablish and mature secure software development lifecycle practices across Engineering.\n\nPartner directly with engineers to identify, reproduce, prioritize, and remediate application vulnerabilities.\n\nReview application code and architecture, propose fixes, and contribute or validate security-related code changes where appropriate.\n\nLead threat modeling, secure architecture reviews, penetration testing, vulnerability management, and remediation tracking.\n\nIntegrate SAST, DAST, software composition analysis, secrets detection, and other security controls into CI/CD pipelines and developer workflows.\n\nBuild reusable guardrails, secure coding patterns, and automation that make it easier for engineers to ship secure software.\n\nDefine and implement security standards for AI-powered products and machine learning systems, including data protection, tenant isolation, prompt-injection risks, agent permissions, tool use, and continuous security evaluation.\n\nSecurity Operations and Incident Response\nBuild and operate security monitoring, detection, logging, alerting, and incident response capabilities.\n\nTriage security findings and incidents, lead investigations, coordinate containment and remediation, and drive postmortems to completion.\n\nDevelop incident-response playbooks and lead tabletop exercises.\n\nEstablish and operate a risk-based vulnerability-management program that consolidates findings, validates exploitability, assigns ownership and remediation SLAs, tracks exceptions, and drives issues through closure.\n\nImprove detection coverage and response readiness based on incidents, threat intelligence, and changes to Plenful's platform.\n\nCloud and Infrastructure Security\nStrengthen security across Plenful's AWS infrastructure.\n\nImprove identity and access management, secrets management, infrastructure hardening, endpoint security, and network security.\n\nReview Infrastructure as Code, Kubernetes, containers, and cloud architecture for security risks.\n\nPartner with Infrastructure and DevOps engineers to remediate findings and implement preventive controls.\n\nGovernance, Risk, and Compliance\nLead Plenful's security compliance strategy, including SOC 2, HIPAA, HITRUST, and future certifications.\n\nDevelop and maintain practical security policies, standards, and controls.\n\nOwn or support vendor risk management and third-party security reviews.\n\nPartner closely with Legal and Compliance on security, privacy, incident response, and customer commitments.\n\nCustomer Trust and Executive Partnership\nRepresent Security during enterprise customer reviews and technical security discussions.\n\nPartner with Sales and Customer Success to support enterprise deals, security questionnaires, and customer due diligence.\n\nCommunicate security posture, material risks, incidents, investments, and priorities clearly to executive leadership and the Board.\n\nBuild a security-first culture through education, practical guidance, and partnership.\n\nWhat We Are Looking For\nRequired Qualifications\n12+ years of progressive experience in cybersecurity, application security, security engineering, security operations, cloud security, or infrastructure security.\n\n2+ years leading security teams, programs, or major cross-functional security initiatives.\n\nDeep, hands-on experience in application security and security operations.\n\nDemonstrated ability to investigate and remediate vulnerabilities in modern web applications, APIs, and distributed systems.\n\nAbility to read application code, reason about security flaws, and work directly with engineers on effective fixes. Experience contributing security-related code changes is strongly preferred.\n\nExperience with threat modeling, secure architecture reviews, penetration-test remediation, vulnerability management, and incident response.\n\nExperience integrating and operating security tooling across CI/CD pipelines and developer workflows.\n\nStrong technical background in modern cloud environments, preferably AWS, including IAM, logging, network security, secrets management, and Infrastructure as Code.\n\nExperience securing enterprise SaaS platforms and multi-tenant systems.\n\nExperience with healthcare security and compliance frameworks, including HIPAA and SOC 2.\n\nStrong judgment in prioritizing security work in a fast-moving environment with limited resources.\n\nExceptional communication skills with the ability to work effectively with engineers, executives, customers, auditors, Legal, Compliance, and Sales.\n\nBachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.\n\nPreferred Qualifications\nExperience as an early security hire at a startup or high-growth technology company.\n\nHands-on experience with Python, TypeScript, or similar modern application languages.\n\nExperience with HITRUST certification.\n\nExperience securing AI/ML platforms, agentic systems, and modern data infrastructure.\n\nExperience with Kubernetes, container security, Infrastructure as Code, and cloud-native architectures.\n\nExperience building security automation and internal security tooling.\n\nCISSP, CISM, CCSP, GIAC, or comparable certifications.\n\nWhat Success Looks Like\nWithin your first 12 months, you will:\nEstablish a risk-based security roadmap with clear ownership and measurable outcomes.\n\nReduce the existing application and infrastructure vulnerability backlog and establish sustainable remediation SLAs.\n\nEmbed practical AppSec controls and security tooling into Engineering workflows and CI/CD pipelines.\n\nImprove Plenful's monitoring, detection, incident-response, and vulnerability-management capabilities.\n\nStrengthen cloud security, tenant isolation, identity, secrets management, and other high-impact preventive controls.\n\nEstablish security standards and evaluation practices for Plenful's AI-powered products.\n\nStrengthen compliance and customer trust programs to support enterprise growth.\n\nBecome a trusted, hands-on partner to Engineering, Product, Legal, Compliance, Sales, customers, and executive leadership.\n\nWhy You'll Love Working Here\nMission-Driven, World-Class Team - Join an exceptional group of professionals aligned around a meaningful mission and committed to making an impact\n\nOpportunities for Growth - Strengthen your expertise through collaboration with experienced, high-performing leaders across the organization\n\nFlexible Hybrid Work Environment - We're remote-first, with meaningful office presence in San Francisco and New York. R&D roles follow a hybrid model, with two days per week in our San Francisco office\n\nBenefits & Perks\nHealthcare Coverage - Full medical, dental, and vision insurance for you and participation for your family\n\n401(k) with Company Match - Plenful matches 50% of your first 3% contributed\n\nEquity - Every full-time employee shares in our success\n\nUnlimited PTO - Take the time you need, when you need it\n\nDaily Lunch Stipend - $100/week to cover your midday meals\n\nWellness Stipend - $100/month to support your health and well-being\n\nCommuter Benefits - $100/month for SF and NYC-based employees\n\nParental Leave - Paid leave to support growing families","description_format":"text","description_chars":9956,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Parental leave","Unlimited PTO","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Medical AI","Hospital Operations Software"],"lifecycle":[{"event":"open","at":"2026-10-07T12:30:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":42,"reasons":["conf:0","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/plenful-senior-manager-manager-security","json_url":"https://alion.io/job/plenful-senior-manager-manager-security.json","meta":{"generated_at":"2026-10-14T09:11:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10140,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6924},"rest":"https://alion.io/mcp/rest/get_company?id=6924"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fplenful-senior-manager-manager-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fplenful-senior-manager-manager-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fplenful-senior-manager-manager-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/plenful-senior-manager-manager-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fplenful-senior-manager-manager-security"}]}