Engineering Manager

Role overview

EvenUp is hiring an Engineering Manager to lead the Security and IT teams within the Infrastructure team (full remote). You will set the security roadmap, own key compliance programs, and partner closely with engineering to embed security into the software development lifecycle.

Key missions

• Define and drive EvenUp’s security roadmap for a growing security and IT organization.
• Own and lead compliance programs, specifically SOC 2 Type II and HIPAA (from gap assessment to audit support).
• Partner with engineering on product security and secure SDLC practices.
• Manage corporate IT and infrastructure security.
• Lead vendor and third-party risk management (security reviews, BAAs/DPAs, ongoing monitoring).
• Oversee incident response and broader risk management.
• Build security culture through enablement and mentoring, and grow the team.

Requirements

• Proven security leadership in a startup or high-growth setting.
• Experience building or scaling a security function (not only maintaining it).
• Strong technical depth across the stack, including:
  • Cloud security (AWS/GCP/Azure)
  • IAM
  • Endpoint security
  • Secure SDLC practices
• Product security expertise, including:
  • Vulnerability management
  • Threat modeling
  • Ability to integrate security into engineering teams without becoming a bottleneck
• Builder mindset: comfortable with end-to-end work such as writing policies, configuring tooling (e.g., SIEM), executive communication, and taking part in incidents.
• People leadership experience managing and growing small technical teams.
• Deep, hands-on compliance experience with SOC 2 Type II and HIPAA.

Nice to have

• Familiarity with emerging requirements like state privacy laws and AI governance.