Senior Manager, Security Ops & Prod Security
Sign up free to see how well your resume matches this role.
What you'll do
- Lead the Product and Security Operations teams, developing talent and holding the teams accountable for measurable outcomes.
- Define strategy, operating plans, metrics, and resource priorities aligned with Calendly’s highest risks.
- Build strong partnerships across Security and with key cross-functional teams to align on risk, response, and remediation.
- Communicate priorities, risk tradeoffs, and program performance to senior leadership and cross-functional stakeholders.
- Scale product security capabilities, including threat modeling, application security testing, vulnerability management, and developer enablement.
- Lead detection engineering, incident response, threat intelligence, monitoring, and threat hunting capabilities.
- Guide high-severity incidents, complex investigations, and security reviews, driving durable remediation of systemic issues.
- Establish standards for control coverage and effectiveness across applications, cloud, identity, and endpoints.
- Manage program budgets and strategic security vendors.
What they're looking for
- 7+ years of cybersecurity experience across product, application, or infrastructure security, plus security operations, incident response, or detection engineering.
- 4+ years managing experienced security engineers or multidisciplinary technical teams.
- Strong communication skills and the ability to navigate sensitive decisions with technical teams and senior leaders.
- Experience defining strategy and delivering measurable outcomes across multiple security disciplines.
- Experience building or scaling product security programs with Product and Engineering teams.
- Strong knowledge of secure software development, threat modeling, application security testing, vulnerability management, and cloud-native architectures.
- Strong knowledge of incident response, detection engineering, SIEM, EDR, cloud security, and identity security.
- Experience translating ambiguous risks into prioritized, cross-functional programs and driving remediation through influence.
- Experience managing budgets, MSSPs, testing firms, or other security providers.
- Authorization to work in the United States, as Calendly does not provide immigration sponsorship at this time.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
What’s in it for you?
Ready to make a serious impact? Millions of people already rely on Calendly, and we’re still in the midst of exciting product growth — it’s a fantastic time to join us. Everything you’ll work on here will accelerate your career to the next level. If you want to learn, grow, and do the best work of your life alongside the best people you’ve ever worked with, then we hope you’ll consider allowing Calendly to be a part of your professional journey.
About the team and opportunity
Calendly takes the work out of scheduling, giving our customers more time to focus on what truly matters. Our software is trusted by millions of users worldwide, with thousands more joining us every day. To sustain our rapid growth, we’re seeking top talent to help shape the future of our product and continue delivering exceptional value to our customers.
Why Join Calendly’s Security Team?
Joining Calendly’s Security team offers a unique opportunity to be part of a fast-growing, high-impact company that’s transforming how people schedule meetings.We’re committed to fostering a strong security and engineering culture that attracts self-starters who thrive in dynamic, innovative environments.If you’re passionate about security and excited to explore uncharted territory, this is the place for you.
A day in the life of a Senior Manager, Product Security & Security Operations at Calendly
We are seeking a highly technical and strategic Senior Manager of Product Security & Security Operations to lead, mature, and scale both functions. This leader will build strong partnerships across Product and Engineering, embed security throughout the software development lifecycle, and strengthen Calendly’s ability to detect and respond to threats.
The ideal candidate combines product and application security depth with strong security operations experience. They will lead teams, set strategy, and remain close enough to the work to guide architecture reviews, vulnerability remediation, detection engineering, investigations, and high-severity incidents.
Key Responsibilities:
- Lead the Product Security and Security Operations teams, developing talent and holding the teams accountable for measurable outcomes.
- Define strategy, operating plans, metrics, and resource priorities aligned with Calendly’s highest risks.
- Build strong partnerships across Security and with key cross-functional teams to align on risk, response, and remediation.
- Communicate priorities, risk tradeoffs, and program performance to senior leadership and cross-functional stakeholders.
- Scale product security capabilities, including threat modeling, application security testing, vulnerability management, and developer enablement.
- Lead detection engineering, incident response, threat intelligence, monitoring, and threat hunting capabilities.
- Guide high-severity incidents, complex investigations, and security reviews, driving durable remediation of systemic issues.
- Establish standards for control coverage and effectiveness across applications, cloud, identity, and endpoints.
- Manage program budgets and strategic security vendors.
What We’re Looking For
This opportunity is for you if you have:
- 7+ years of cybersecurity experience across product, application, or infrastructure security, plus security operations, incident response, or detection engineering.
- 4+ years managing experienced security engineers or multidisciplinary technical teams.
- Strong communication skills and the ability to navigate sensitive decisions with technical teams and senior leaders.
- Experience defining strategy and delivering measurable outcomes across multiple security disciplines.
- Experience building or scaling product security programs with Product and Engineering teams.
- Strong knowledge of secure software development, threat modeling, application security testing, vulnerability management, and cloud-native architectures.
- Strong knowledge of incident response, detection engineering, SIEM, EDR, cloud security, and identity security.
- Experience translating ambiguous risks into prioritized, cross-functional programs and driving remediation through influence.
- Experience managing budgets, MSSPs, testing firms, or other security providers.
- Authorization to work in the United States, as Calendly does not provide immigration sponsorship at this time.
The ranges listed above are the expected annual base salary for this role, subject to change.
Calendly takes a number of factors into consideration when determining an employee’s starting salary, including relevant experience, relevant skills sets, interview performance, location/metropolitan area, and internal pay equity.
Base salary is just one component of Calendly’s total rewards package. All full-time (30 hours/week) employees are also eligible for equity awards, and competitive benefits. Eligible Sales employees also qualify for a Sales Incentive program.
Calendly uses the zip code of an employee’s remote work location, or the onsite building location if hybrid, to determine which metropolitan pay range we use. Current geographic zones are as follows:
- Tier 1: San Francisco, CA, San Jose, CA, New York City, NY
- Tier 2: Chicago, IL, Austin, TX, Denver, CO, Boston, MA, Washington D.C., Philadelphia, PA, Portland, OR, Seattle, WA, Miami, FL, and all other cities in CA.
- Tier 3: All other locations not in Tier 1 or Tier 2
If you are an individual with a disability and would like to request a reasonable accommodation as part of the application or recruiting process, please let your Recruiter know when first connecting with them. Calendly is registered as an employer in many, but not all, states. If you are located in Alaska, Delaware, Hawaii, Idaho, Iowa, Montana, Nebraska, North Dakota, Rhode Island, South Dakota, and West Virginia, you will not be eligible for employment. Note that all individual roles will specify location eligibility.
All candidates can find our Candidate Privacy Statement here
Candidates residing in California may visit our Notice at Collection for California Candidates here: Notice at Collection
This role may require occasional travel for company events, team collaboration, or offsites.
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.