Software Engineering Manager, Cybersecurity
Job Description
Lead cybersecurity improvement across a division’s application and product portfolio while building a high-performing engineering team. In this onsite Software Engineering Manager role, you will strengthen secure delivery practices, embed security-by-design throughout the software development lifecycle, and drive measurable risk reduction in partnership with central cybersecurity teams. Based in Peoria, IL, you will help translate business needs and enterprise policy into prioritized engineering initiatives and roadmap execution.
What you’ll do
- Manage and grow the team by hiring, coaching, and developing engineering talent, setting clear goals, and driving performance.
- Build a network of security champions across delivery teams to strengthen ownership and improve everyday engineering practices.
- Own the division’s application security improvement roadmap in partnership with central cybersecurity.
- Translate business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates, and progress reviews.
- Manage capacity, budgets, tools, and supplier relationships to support delivery.
- Review technical standards, architecture, and design conformance, resolve delivery constraints, and drive continuous improvement in quality and service effectiveness.
- Embed security-by-design through threat modeling, secure code, pull-request review, and security testing across the software development lifecycle.
- Guide secure handling of secrets, cloud configuration, and third-party dependencies.
- Establish documented security release gates using approved enterprise processes.
- Ensure API and endpoint authentication, authorization, and access-control reviews are completed and approved before code moves through environments.
- Accelerate adoption of shared security tools and preventive controls within continuous integration and delivery pipelines.
- Apply automation and AI-assisted scanning with appropriate oversight, validated findings, and clear accountability.
- Lead vulnerability triage with security experts by validating accuracy, removing duplicates, applying consistent severity (for example, CVSS), assessing business impact, and prioritizing high-risk issues.
- Assign remediation owners, agree timelines, and track findings to verified closure.
- Escalate risk through established governance, address systemic root causes, and prioritize shared-platform fixes to prevent recurrence.
- Maintain accurate application, asset, and repository inventories with clear ownership mapping.
- Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service-level performance, and risk reduction.
- Run regular security progress reviews and communicate decisions, trade-offs, and support needs to stakeholders.
- Coordinate audit evidence, policy alignment, and remediation with central cybersecurity and application security teams.
- Create a shared home for division security guidance, training, and documentation.
- Coach teams and suppliers, encourage proactive discovery, and support responsible self-reporting to make security practices sustainable.
What you bring
- Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
- Strong experience as a Software Engineer Manager and/or lead experience.
- Strong knowledge of software development, architecture, integration, and testing, with practical experience applying secure development practices to modern applications, APIs, and cloud environments.
- Broad cybersecurity knowledge with hands-on application security judgment, including threat modeling, authentication and authorization, vulnerability validation and remediation, and automated security controls.
- Experience translating security policies and frameworks into engineering controls, supporting audits, and managing risk-based improvement programs with measurable outcomes.
- Practical knowledge of OWASP guidance and security testing tools, including static/dynamic analysis, dependency scanning, secret scanning, and integrating controls into delivery pipelines.
- A track record of building security champions, improving engineering practices, and using metrics to drive adoption and recurring-risk reduction.
- Clear communication and stakeholder leadership skills, including the ability to explain technical risk in business terms and balance security, quality, cost, and delivery speed.
- Experience scaling application security in a complex or global enterprise, with product-centric or Agile delivery and collaboration with central security functions preferred.
- Relevant certifications such as CISSP, CISM, CSSLP, or GIAC, or a related master’s degree, or comparable advanced expertise demonstrated through practice.
Benefits
- Medical, dental, and vision benefits*
- Paid time off plan (Vacation, Holidays, Volunteer, etc.)*
- 401(k) savings plans*
- Health Savings Account (HSA)*
- Flexible Spending Accounts (FSAs)*
- Health Lifestyle Programs*
- Employee Assistance Program*
- Voluntary Benefits and Employee Discounts*
- Career Development*
- Incentive bonus*
- Disability benefits
- Life Insurance
- Parental leave
- Adoption benefits
- Tuition Reimbursement
Location and additional details
- Location: Peoria, IL (onsite)
- Also requires consideration for Chicago, IL; Peoria, IL; Denver, CO; or Dallas, TX.
- Relocation assistance is not available for this position.
- Visa sponsorship is not available for this position.
- Travel: up to 20%.
- Work arrangement: onsite five days a week.
- Employment offer conditioned upon successful completion of a drug screen.
Salary range: USD 147,760 - 240,110 per yearly. Career area: Technology, Digital and Data.