Manager Security Engineer

Job description

The Company: Marigold is a fast-growing marketing technology company helping growing businesses build stronger customer relationships through its three core platforms: Emma, Campaign Monitor, and Vuture. We deliver powerful tools for email, SMS, and marketing automation that elevate engagement and drive real results. Marigold is headquartered in Nashville, Tennessee with offices in Sydney and London. The Role: Marigold is seeking an experienced Security Engineering Manager to lead our Security Engineering function and help safeguard our people, products, and infrastructure. This is a hands-on leadership role responsible for managing a team of security engineers while driving enterprise-wide security strategy, incident response, vulnerability management, and security operations. As the Security Engineering Manager, you'll partner closely with Engineering, Infrastructure, Product, Legal, HR, and IT to embed security into every stage of the system lifecycle. You'll play a key role in protecting critical business assets, reducing organizational risk, and fostering a strong security-first culture across the company. This position offers the opportunity to develop deep knowledge of Marigold's products, technology stack, and global business operations while leading initiatives that directly support the company's long-term success. What You’ll Do: Lead and develop the Security Engineering team by providing technical leadership, coaching, mentorship, and performance management while fostering a culture of continuous improvement and security awareness. Develop, implement, and maintain enterprise security strategies, policies, standards, and controls that align with business objectives and regulatory frameworks including ISO 27001, SOC 2, NIST, and GDPR. Lead security operations, including incident response, threat detection, vulnerability management, security monitoring, root cause analysis, and continuous improvement of the organization's security posture. Design, implement, and manage security technologies including SIEM, endpoint detection and response (EDR), firewalls, web application firewalls (WAF), identity and access management (IAM), and cloud security controls across AWS and GCP environments. Partner cross-functionally with Engineering, Infrastructure, Product, Legal, HR, and IT teams to integrate security into system design, change management, application development, and enterprise risk management while monitoring security metrics, supporting audits, and driving ongoing compliance initiatives. About You: You are a collaborative security leader who enjoys solving complex technical challenges while building strong relationships across the organization. You have a passion for protecting enterprise environments, mentoring technical teams, and translating cybersecurity risks into practical business decisions. You thrive in fast-paced environments where you can balance strategic planning with hands-on technical execution. Ideal Qualifications: 4+ years of dedicated cybersecurity experience with progressively increasing responsibility, including prior people leadership or team management experience. Strong expertise in enterprise security operations, vulnerability management, incident response, network and system architecture, endpoint protection, and identity and access management. Experience securing cloud environments, particularly AWS and/or Google Cloud Platform (GCP), and partnering with Managed Security Service Providers (MSSPs). Demonstrated experience implementing security frameworks and regulatory standards such as ISO 27001, SOC 2, NIST, and GDPR. Excellent communication skills with the ability to present technical security risks and recommendations to both technical and executive audiences. Ability to make informed decisions under pressure and participate in an on-call incident response rotation. Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience. Nice to Have: Active CISSP, CISM, GSEC, or other recognized cybersecurity certification. Experience leading organization-wide security awareness programs and phishing simulation initiatives. Experience supporting external security audits and enterprise compliance programs. Location Eligibility This position is eligible for hire in the following US states: Arizona, Florida, Georgia, Michigan, New York, North Carolina, Tennessee, Texas, and Virginia. Compensation & Benefits Compensation: The base salary range for this role is $120,000 -$130,000 annually. The compensation range represents the pay the Company reasonably expects to offer for this position. Actual compensation will be determined based on factors such as skills, experience, qualifications, internal equity, geographic location, and applicable law. Benefits: Competitive benefits including: medical/dental/vision insurance, life/accident/disabilities insurance, supplemental health benefits, FSA, EAP and pet insurance Generous time off (we call it Open Time Away) as well as paid holidays and a birthday benefit day off. Paid Volunteer Time 401k plan with a company match on your contributions. Employee-centric and supportive remote work environment with flexibility. Support for life events including paid parental leave.