Engineering Manager

Role Overview

EvenUp is hiring an Engineering Manager (full remote) to lead the Security and IT teams. You will define the company security roadmap, embed security into the software development lifecycle, and own core compliance programs.

Key Missions

• Define and lead the company security roadmap; act as the internal authority on security risk and posture.
• Own SOC 2 Type II and HIPAA programs end-to-end, including gap assessments and audit preparation.
• Partner with engineering to integrate security into the secure SDLC.
• Manage corporate IT systems and oversee security-relevant operational controls.

Responsibilities

• Provide hands-on security leadership with technical depth across the stack.
• Run and mature vendor/third-party risk processes, including security reviews and ongoing third-party monitoring.
• Lead vulnerability management and threat modeling, and ensure security practices keep pace with engineering speed.
• Lead, hire, and grow small technical teams; develop talent as the function scales.

Requirements

• Strong technical depth across the stack.
• Working knowledge of cloud security (AWS/GCP/Azure), IAM, endpoint security, and secure SDLC.
• Experience with vendor & third-party risk programs (security reviews, BAAs/DPAs, ongoing monitoring) in a data-sensitive environment.
• Product security experience, including vulnerability management and threat modeling.
• Builder mentality: comfortable writing policies, configuring security tooling (e.g., SIEM), presenting to executives, and responding to incidents.
• People leadership experience managing and growing technical teams.
• Deep compliance experience owning SOC 2 Type II and HIPAA from control design through audit.
• Proven security leadership in a startup/high-growth environment; experience building/scaling a security function.

Nice to Have

• Familiarity with emerging requirements such as state privacy laws and AI governance.