Engineering Manager - Security Standards and Hardening

Overview

We are seeking an experienced Engineering Manager to lead initiatives aimed at enhancing security standards within a widely adopted open-source technology ecosystem, based in Saudi Arabia. This leadership role carries significant influence over engineering practices and involves guiding a team that develops security measures for operating systems, cloud infrastructure, edge environments, and modern software platforms.

Key Responsibilities

• Lead and nurture a diverse engineering team ranging from new graduates to senior staff, fostering professional growth through coaching and feedback.
• Promote a collaborative, high-performance engineering culture by tracking team health and instituting disciplined engineering workflows.
• Serve as a representative for the engineering team to stakeholders, clients, industry partners, and the open-source community.
• Coordinate and oversee progress toward engineering objectives, managing projects and ensuring deliverables are achieved timely and with high quality.
• Support products and clients to fulfill strict security and compliance standards such as FIPS, CIS, STIG, FedRAMP, and the Cyber Resilience Act.
• Lead initiatives related to cryptographic modules, FIPS 140 compliance, and system hardening practices.
• Collaborate with external organizations and security partners to advance secure operating system deployments and adherence to compliance frameworks.
• Advocate adoption of robust security engineering practices and uphold software quality and safety standards within the engineering teams.
• Continuously identify and implement improvements to engineering processes, collaboration, and delivery efficiency.
• Maintain alignment of projects with strategic priorities, ensuring effective and timely execution.

Qualifications and Experience

• Demonstrated leadership in engineering, with a successful history of mentoring and developing technical staff.
• Bachelor’s degree in Computer Science, STEM field, or comparable technical credentials, or equivalent professional experience.
• Extensive experience with products certified to FIPS or Common Criteria standards and a solid understanding of their security foundations.
• Practical knowledge with DISA STIG or CIS benchmarks including auditing, remediation, and using tools like Compliance as Code.
• Strong expertise and enthusiasm for software security, application security, and secure engineering methodologies.
• Experience working within Agile software development environments.
• Excellent English communication skills, capable of interfacing effectively with both technical and non-technical audiences.
• Organizational and project management skills capable of juggling multiple priorities while consistently delivering outcomes.
• Collaborative work approach with colleagues, customers, and community partners, building trust and demonstrating leadership.
• Passionate about ongoing learning and staying abreast of evolving security risks, standards, and technologies.
• Excellent ownership, initiative, and full commitment to achieving objectives.
• Willingness and ability to travel approximately twice annually for company events lasting up to two weeks.
• Familiarity with Linux cryptographic libraries such as OpenSSL or GnuTLS is advantageous.
• Strong academic achievements and a track record of exceeding expectations are preferred.

Benefits

• Work in a globally distributed environment with in-person team sprints biannually.
• Annual performance-based bonus on top of base salary.
• Yearly compensation reviews factoring in location, experience, and performance.
• Annual USD 2,000 learning and development budget to support personal growth.
• Recognition and rewards programs to celebrate achievements.
• Inclusive holiday, maternity, and paternity leave policies.
• Employee Assistance Programme for wellbeing support.
• International travel opportunities to collaborate with colleagues globally.
• Priority Pass and travel upgrades for extended company events.
• Chance to lead impactful security efforts shaping open-source infrastructure globally.
• Opportunity to influence engineering standards, security protocols, and team development substantially.
• Exposure to cutting-edge security frameworks, cryptography, system hardening, cloud, and open-source technologies.