Manager, Product Security

About the role

We are looking for a Product Security Manager to lead a team focused on cloud, application, and AI security within our Product Security organization.

This role is responsible for securing our cloud infrastructure, protecting applications, and enabling safe adoption of AI across our products and internal systems. You will work closely with engineering, product, and platform teams to ensure that Chime applications and systems are designed and operated securely.

While cloud and application security are core pillars of this role, AI security is an increasingly critical area of focus. You will help define how we safely leverage AI technologies while managing risks such as data exposure, misuse, and insecure integrations.

This role operates within a flexible POD model, requiring you and your team to move fluidly across security domains based on business priorities.

In this role, you can expect to

- Own the security posture of cloud infrastructure, application systems, and AI-enabled applications across product surfaces

- Influence platform teams' roadmaps and drive alignment on security priorities without direct authority

- Partner with engineering and product teams to embed security into system design and development workflows

- Lead and grow a team of security engineers, setting a high bar for technical execution, ownership, and impact

- Define and execute strategy for securing cloud-native architectures and applications at scale

- Establish guardrails and secure design patterns for AI adoption, including safe integration of third-party and internal AI systems

- Identify and mitigate risks related to AI systems, including prompt injection, data leakage, and misuse of models or APIs

- Build scalable controls and automation around identity, access, encryption, and application security, including secure SDLC and vulnerability management processes

- Lead and support response efforts for security incidents related to cloud, application, and AI risks

To begin in this role, you have

- 5+ years of experience in security engineering, with significant experience in cloud and application security

- 2+ years of experience managing or leading security engineers

- Strong understanding of cloud platforms (AWS, GCP), Infrastructure as Code (IaC), and modern infrastructure patterns

- Experience with industry tooling for SAST, DAST, SCA, WAF, and CNAPP

- Experience designing or securing applications that handle sensitive or regulated data

- Experience securing or evaluating AI/ML systems, or demonstrated ability to operate effectively in ambiguous and emerging security domains

- Strong technical judgment and the ability to go deep in architecture and security discussions when needed