Security Engineering Manager

We use AWS exclusively for our customer-facing backend infrastructure. We use tools like GitHub, Stripe, Vanta, and PagerDuty, but all of our application work happens on AWS.

We use serverless technologies almost exclusively to build our products: Lambda, API Gateway, SQS, SNS, DynamoDB, Aurora Serverless, and more. We don’t run a single server.

We use CDK (TypeScript) to define infrastructure as code.

Lead and grow a high-performing security team by setting an ambitious pace with rigorous quality expectations, and by hiring as the function scales.

Oversee our compliance engineering posture, ensuring our processes and evidence meet SOC, HIPAA, and HITRUST requirements.

Manage daily engineering efforts, monitoring timelines and resources to ensure projects are executed efficiently and to a high standard.

Increase accountability across the team by setting clear performance expectations and regularly reviewing progress to ensure high standards are consistently met.

Continuously assess vulnerabilities, perform regular risk assessments, and prioritize remediation based on actual risk to the business and our customers.

Mentor engineers and make security a shared responsibility and focus across Stedi.

6+ years of experience in security or security adjacent roles, with at least 3+ years in a management role.

Experience with compliance frameworks such as SOC, HIPAA, and/or HITRUST and control design.

Hands-on experience in application security and endpoint security.

Exceptional written communication skills, with the ability to synthesize and clearly convey complex technical and risk information to both engineers and executives.

Proven experience managing and fostering collaboration in a remote-first environment, ensuring team alignment and cohesion.

A commitment to cultivating a high-performing team.

High bandwidth with the ability to pay thoughtful attention to many areas simultaneously.

Ability to context switch throughout the course of the day or week as priorities shift.

Philosophical alignment with the Stedi Standards .

We’ve been made aware of individuals impersonating the Stedi recruiting team. Please note:

All official communication about roles at Stedi will only come from an @ stedi.com email address , or from our official identification verification partner, Persona, @ frompersona.com .

If you’re unsure whether a message is legitimate or have any concerns, feel free to contact us directly at careers@stedi.com .

We appreciate your attention to this and your interest in joining Stedi.

At Stedi, we're looking for people who are deeply curious and aligned to our ways of working. You're encouraged to apply even if your experience doesn't perfectly match the job description.