Manager, Security Engineering

Manager, Security Engineering

Location: Leesburg, VA

Company: VB Spine

Looking for a career where your work truly matters? At VB Spine, you'll be part of a mission-focused team that supports surgeons during life-changing spinal procedures. We're looking for driven individuals ready to learn quickly, adapt under pressure, and grow in a dynamic, fast-paced environment.

The Senior Manager, Security Engineering, will lead VB Spine's global security engineering function, responsible for designing, implementing, and maintaining advanced security technologies and architectures that protect VB Spine's intellectual property, manufacturing continuity, and regulatory posture. This role focuses on building resilient security infrastructure, enabling secure business operations, and driving innovation in security automation and architecture.

Reporting to the CISO (Sr. Director, Cybersecurity & IT Compliance), this individual will oversee security technology lifecycle management, including endpoint protection, identity security, network segmentation, cloud security, and vulnerability management. The Security Engineering Manager will partner closely with Infrastructure, Application Development, and GRC teams to ensure security is embedded across all technology platforms and processes.

What You'll Do:

Security Architecture & Engineering Leadership

• Lead VB Spine's security engineering function, ensuring robust design and implementation of security controls across on-prem, cloud, and hybrid environments.
• Develop and maintain enterprise security architecture aligned with NIST CSF, ISO 27001, and FDA/medical device regulations.
• Oversee deployment and optimization of security technologies, including EDR/XDR, SIEM, identity protection, network security, and cloud-native security tools.
• Drive adoption of Zero Trust principles and secure-by-design methodologies across infrastructure and applications.

Technology Enablement & Automation

• Implement automation and orchestration solutions (SOAR) to streamline security workflows and reduce manual effort.
• Collaborate with SecOps and MSSPs to ensure telemetry integration and detection rule optimization.
• Evaluate emerging technologies (AI-driven detection, threat intelligence platforms) and develop a roadmap for continuous improvement.

Vulnerability & Risk Management

• Own vulnerability management lifecycle, including scanning, prioritization, remediation, and reporting.
• Partner with IT and application teams to ensure timely patching and secure configuration baselines.
• Conduct security assessments for new technologies and third-party integrations.

Leadership & Strategy

• Develop a multi-year roadmap for security engineering maturity, including automation, advanced analytics, and secure development practices.
• Mentor and grow a global team of security engineers, fostering a culture of innovation and operational excellence.
• Collaborate with Cybersecurity, Infrastructure, and Business Applications teams to deliver an integrated security posture

What You Bring:

• Bachelor's degree in Cybersecurity, Computer Science, or related field preferred; equivalent experience considered.
• Preferred certifications: CISSP, CISM, or SABSA for architecture; GIAC (e.g., GSEC, GCSA) for engineering expertise; Azure/AWS security certifications for cloud security.
• Minimum 8+ years of progressive cybersecurity experience, including 3+ years in security engineering or architecture leadership roles.
• Proven experience designing and implementing enterprise security architectures and technologies.
• Strong knowledge of SIEM/XDR platforms (Microsoft Sentinel, Defender XDR), identity security, and cloud security models.
• Expertise in vulnerability management, secure configuration, and automation/orchestration tools.
• Experience in regulated industries (medical device, life sciences, healthcare) is a plus.
• Demonstrated expertise in incident response frameworks, escalation workflows, and regulatory evidence collection.
• Experience managing hybrid delivery models with a mix of internal analysts and outsourced MSSPs, including vendor governance and SLA enforcement.
• Familiarity with automation/orchestration tools and threat intelligence integration.
• Exceptional leadership, communication, and stakeholder management skills.
• Ability to influence, motivate, and build trust across diverse global teams.
• Experience in regulated industries (medical device, life sciences, or healthcare) is a plus.

Physical & mental requirements:

• Ability to work in a fast-paced environment and manage multiple priorities
• Strong analytical, problem-solving, and decision-making skills.
• Occasional travel to the company site and vendor locations may be required.

Why VB Spine?

We believe in growing talent from within. At VB Spine, you'll get the training, mentorship, and support you need to build a strong foundation in the medical sales field. You'll work alongside a high-performing team, gain valuable operating room experience, and take your first step toward a rewarding and meaningful career.

Compensation:

Pay for this role is competitive and based on experience, with qualifications and performance taken into account.

VB Spine reserves the right to offer compensation outside of this listed range. Final compensation is determined on a case-by-case basis and considers a variety of factors including experience level, skillset, and market conditions.

Benefits include:

• Comprehensive health, dental, and vision insurance
• 401(k) with company match
• Paid time off (PTO) and holidays
• Ongoing training and professional development opportunities
• Opportunity to grow within a fast-paced, dynamic company