> Markdown version of [/jobs/ext/1794578-security-technical-program-manager](https://www.wearedevelopers.com/jobs/ext/1794578-security-technical-program-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Technical Program Manager

- **Company:** Snap Inc.
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Salary:** $190,000.0 - $284,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Decision Support Systems, Issue Tracking Systems, Software Vulnerability Management, Information Technology
- **Published:** July 18, 2026
- **Apply:** https://dejobs.org/x/x/417A095CBB3842EAAE280F58E82B73F0/job/

## About the Role

* Depth of security experience and familiarity with a broad range of information security concepts and principles
 * Proven experience of running critical programs within a security field
 * Experience working with engineers, driving large security projects that have had a proven impact
 * Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
 * Experience influencing teams and other cross-functional stakeholders to drive security programs
 * Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks.
 * Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices.

Minimum qualifications:

 * Bachelor's degree in computer science or a related technical field or equivalent experience
 * 6+ years of experience in security advisory space, technical program management or security solution delivery

Preferred Qualifications:

 * Experience with with NIST CSF 2.0, NIS2, or ISO 27001
 * Experience with CISSP, CISM, CCSP, ISO 27001 Lead Implementer or similar certifications a plus

## Description

We're looking for a Security Technical Program Manager to join Snap! The Security TPM team designs and leads multiple critical security programs at Snap.

What you'll do:

 * Lead the design, build, and ongoing operation of security operations and risk programs that improve cyber maturity across core security foundations, including governance, intake, prioritization, escalation, and remediation follow-through.
 * Define and operationalize security KRIs, KPIs, and health metrics across key domains such as vulnerability management, incident response, detection and response effectiveness, control performance, remediation timeliness, and recurring risk themes.
 * Establish a consistent measurement framework, dashboarding model, and reporting taxonomy so security leaders can review trends, identify material gaps, and drive accountable action across their teams.
 * Prepare and present regular business reviews for security leadership that translate technical signals into clear risk narratives, decisions, priorities, and follow-up actions.
 * Build the operating cadence for security team leadership, including program reviews, metric reviews, escalation forums, and quarterly planning rhythms that connect strategy to execution.
 * Establish a common organizational framework for security team OKRs, including goal setting, dependency management, milestone tracking, evidence of progress, and end-of-quarter readouts.
 * Partner across Security, Engineering, Product, Infrastructure, Privacy, Legal, Compliance, and Operations to align program priorities, resolve blockers, and ensure consistent execution of risk reduction workstreams.
 * Drive root-cause analysis and remediation governance for significant operational issues, ensuring lessons learned are translated into durable process, technology, or control improvements.
 * Create and maintain a portfolio view of security initiatives, risks, dependencies, and commitments, and use that view to support prioritization, staffing discussions, and leadership tradeoff decisions.
 * Define standard methods for risk intake, issue tracking, exception handling, escalation thresholds, and verified closure to improve consistency across the security organization.
 * Improve the rigor of security operations by identifying opportunities for workflow simplification, automation, and better decision support, reducing toil while increasing transparency and accountability.
 * Develop executive-ready briefing materials, scorecards, and narratives that clearly communicate program status, emerging risks, mitigation plans, and areas requiring leadership intervention.
 * Monitor program performance over time and recommend changes to operating models, metrics, and review mechanisms to continuously raise the maturity of security operations and risk management practices.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Recruiting in 2025: Will AI Help or Take Over?](https://www.wearedevelopers.com/videos/1301-recruiting-in-2025-will-ai-help-or-take-over)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)