About this Technical Program Manager, Security Vulnerability Management role at Outreach
About The Team
This role is within our Security organization, which supports Cloud Security, Product Security, Enterprise Security, and Detection & Response. This organization partners with Product, Engineering, Privacy, GRC, IT, and Legal teams to ensure security best practices are applied to protect the company and Outreach customers.
The Role
Are you passionate about contributing to the success of a cybersecurity program through program management? We are seeking an experienced Technical Program Manager to join our Security Team to focus on vulnerability management. In this role you will drive security programs and execute security projects that will assist executing a strategy to improve security posture. The ideal candidate combines strong technical security knowledge with exceptional program management skills. They are comfortable managing complex security projects, leading cross-functional initiatives, engaging directly with customers, and translating security findings into actionable engineering work. This role requires someone who can communicate effectively with engineers, security practitioners, executives, auditors, and customers alike. Location: We are open to remote.
Your Daily Adventures Will Include:
-
Own the end-to-end Security Vulnerability Program across cloud infrastructure, applications, and runtime environments.
-
Coordinate identification, prioritization, tracking, remediation, validation, and reporting of vulnerabilities from multiple security sources, including Cloud Security Posture Management (CSPM), Operating System and Runtime vulnerabilities, Static Application Security Testing (SAST), and Software Composition Analysis (SCA).
-
Partner with Engineering and Security Engineering to establish vulnerability remediation priorities based on risk and business impact. Define and manage dependencies on external teams to improve security posture by getting alignment on commitments.
-
Track vulnerability remediation SLAs and provide executive-level reporting on vulnerability trends and program health.
-
Drive continuous improvements to vulnerability management processes and tooling.
-
Participate in discussions around vulnerability severity, remediation approaches, and security architecture.
-
Manage the Bug Bounty Program from intake through remediation and disclosure. Manage the bug bounty tool and vendor relationship.
-
Measure and improve upon the Bug Bounty Program effectiveness through metrics and process changes.
-
Manage third-party penetration testing engagements from planning through remediation. Manage vendor relationships, scheduling, deliverables, and quality expectations. Review and translate penetration test findings into actionable engineering work items.
-
Represent the Security organization on customer calls and talk about the Outreach platform and security procedures.
-
Lead cross-functional security programs and initiatives across Product, Engineering, Privacy, Legal, and Security.
-
Partner with Governance, Risk, and Compliance (GRC) team to provide evidence to auditors that demonstrate efficacy of security controls.
Our Vision of You:
-
5+ years of cybersecurity experience in a Technical Program Manager in a fast-paced, SaaS software company.
-
Basic understanding of cybersecurity principles, including Network Security, Cloud Security (AWS, Azure, or GCP), and Application Security.
-
Possess vulnerability expertise and the drive to learn the Outreach platform to be able to have technical conversations with engineering
-
Experience managing technical security programs, such as Security Vulnerability Program, Bug Bounty Program, and Security Exceptions Program
-
Familiar with security vulnerability tooling and system integrations.
-
Can successfully prioritize work resulting from security findings, stakeholder requests, and strategic vision.
-
Proactively identify, assess, and manage security risks across projects and systems.
-
Experience managing external security vendors and third-party engagements.
-
An interest in emerging AI technologies and AI security is highly desirable as we continue to evolve our platform and security capabilities.
-
Familiarity with security frameworks (e.g., NIST, ISO 27001, SOC 2)
-
Excellent communication, organizational, and leadership skills
