Senior Staff Security Engineer (Copy)
Spotnana · United States
Let’s build what’s next, together.
We are Spotnana. We’re on a mission to modernize the infrastructure of the $11.7 trillion travel industry to power the perfect trip for travelers everywhere. Our Travel-as-a-Service platform is designed to make every trip better, whether someone is booking for work or leisure travel, building a travel tool, or looking to offer personalized experiences at scale.
We’re not just modernizing tech, we’re rethinking how the industry works. And to get there, we’re bringing together innovative, ambitious, and open-minded people who want to build something that lasts.
At Spotnana, our values and principles guide how we work and grow together:- Build the future – We are leaders, we are innovators, we are ambitious.
- Commit to excellence – We’re accountable, we are partners, we are agile.
- Stronger together – We lead with respect and integrity, we are inclusive, we are lifelong learners.
The opportunity aheadSpotnana is seeking an experienced Senior Manager, Security Engineering to lead the Security Engineering team in our global Security organization. You will run Security Engineering for Spotnana's travel platform and corporate systems and you will build a team of security engineers who make security part of how Spotnana builds software. Security at Spotnana advises Engineering and does not manage it, so you will win agreement from Engineering leaders through clear risk analysis and practical solutions. The ideal candidate is a hands-on leader who reviews designs and code, hires and develops strong engineers, and turns security strategy into a quarterly plan that the team delivers. You will report to the Head of Security & IT.
How you'll help us build- Hire, develop, and manage a team of security engineers across application, cloud, and infrastructure security
- Own the Security Engineering plan for the current and next quarter, based on the Security strategy
- Own the secure software development lifecycle (SDLC) program and its standards across all Engineering teams
- Run the security design review process for new features, partner APIs, payment flows, and AI features, and align review SLAs with the rest of the business
- Set the fix priority for security findings, with the risk to traveler, payment, and customer data as the main input, and escalate overdue critical findings
- Align security priorities with the business and development teams and keep them on the roadmap
- Own the SDLC, change management, and cloud configuration controls in PCI DSS, SOC 2, and ISO 27001 audits, with the GRC team
- Manage the annual external penetration test and the relationships with Security Engineering tool vendors
- Decide how the team splits its time between projects, design reviews, and findings
- Propose headcount, tool, and vendor spend for the team in the annual budget
- Report team metrics, such as open findings by severity and review cycle time, to Security leadership
Experience you bring- 10+ years of security engineering experience, with 3+ years as a manager of security engineers
- A record of hiring, developing, and managing the performance of security engineers
- Deep expertise in at least one of application security, cloud security (AWS), or infrastructure security, and working knowledge of the others
- Experience with a secure SDLC program: threat models, code and dependency scans, and security checks in CI/CD pipelines
- Ability to influence without authority and to communicate clearly to engineers, executives, and auditors
- Experience with PCI DSS, SOC 2, or ISO 27001 audits
- Fluency in at least one programming language, with the ability to review code and build security automation
- Java, Golang, and Python a strong plus
- Experience with an API-driven, multi-region SaaS platform a plus
- Familiarity with the security risks of Artificial Intelligence and Machine Learning features a plus
- Experience in travel technology or payments a plus
What to expect nextSelected candidates will participate in cross-functional virtual interviews exploring their relevant experience, approach to problem-solving, critical thinking, and alignment with Spotnana’s core values. Interviews will include face-to-face conversations as well as coding exercises to demonstrate your ability.
Work Authorization: This position is not eligible for employment-based visa sponsorship. Candidates must be legally authorized to work in the United States and must not require current or future employment sponsorship.
Let’s talk compensationSpotnana strives to offer fair, industry-competitive, and equitable compensation. Our total compensation package includes base salary, an annual performance bonus, company equity, and comprehensive benefits. We use trusted third-party market data to establish compensation ranges that are competitive for the role, industry, company size, and geographic market, while maintaining internal equity across our team.
Compensation is determined based on a variety of factors, including skills, experience, qualifications, and work location. The anticipated annual base salary hiring ranges for this role are:
- New York Metro Area, San Francisco Bay Area, Seattle Metro Area: $186,900-$250,000
- California, New Jersey, Washington, New York, Washington, D.C., Massachusetts, Connecticut: $178,800-$238,000
- Hawaii, Alaska, Maryland, Illinois, New Hampshire, Oregon, Colorado, Virginia, Delaware, Minnesota, Rhode Island, Pennsylvania, Texas: $170,700-$226,000
- All other U.S. states: $162,600-$214,000
Actual compensation may vary based on individual qualifications and the applicable geographic market.We care for the people who make everything possible - our benefits offerings include:- Equity in the form of stock options, which provides partial ownership in the company, so you can share in the success of the company as it grows
- Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
- Comprehensive benefit plans covering medical, dental, vision, life, and disability effective on your hire date. We cover 100% of your employee premiums and 85% of your eligible dependents
- Pre-tax flexible spending account options for health, dependent care, and commuter expenses
- Flexible PTO in addition to 10 company holidays and an end-of-year company shutdown
- Up to 26 weeks of Parental Leave
- Monthly cell phone/internet stipend
- Extra perks — IATAN travel membership, pet insurance, financial wellness tools, Calm app access, and more
We are committed to fostering a diverse, inclusive environment and to encourage these values in everyone on our team. We provide an environment of mutual respect where opportunities are available without regard to race, color, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, and any other characteristic protected by applicable law. We believe that diversity and inclusion for people from all walks of life is key to our success as a company.
Protect yourself from recruitment scams - All recruiting outreach and communication comes directly from our internal team via an email with an @spotnana.com address or through LinkedIn. We encourage candidates to verify the source of any outreach before sharing personal information. We do not use external recruiting partners for our hiring efforts or Microsoft Teams for interviews. We will never ask you to pay for equipment, training, visa fees, or anything else during the hiring process. We do not extend offers via text-based apps or use Microsoft Teams for interviews. All legitimate openings are listed at https://www.spotnana.com/careers/careers-listing/.