Security Engineering Manager, Cloud Security

We are seeking an experienced Security Engineering Manager to lead our Cloud Security team at Dropbox. As the Security Engineering Manager, you will be responsible for ensuring the security and integrity of our cloud-based infrastructure and services. You will oversee a team of talented security engineers, collaborating closely with cross-functional teams to develop and implement robust security solutions in a fast-paced and rapidly evolving cloud environment. This is a high-impact role where you will have the opportunity to shape our cloud security strategy, drive innovation, and protect our customers' data. Our team culture rewards a bias for action, engineering partnership in securing our products, and discipline in how we develop. You’ll thrive in our team if you love delivering impact, working through ambiguity, and developing a culture of innovation. If you are a passionate leader with deep expertise in cloud security and a track record of successfully leading security engineering teams, we encourage you to apply.

• Lead and manage a team of security engineers responsible for ensuring the security of our cloud-based infrastructure and services.
• Develop and execute the cloud security strategy, including designing and implementing security controls and best practices for our cloud environments.
• Develop a healthy and collaborative culture that embodies Dropbox's values.
• Ensure your team delivers extraordinary output, and continuously seeks ways to make an outsized impact.
• Set direction for the team, anticipate strategic and scaling-related challenges via thoughtful long-term planning.
• Collaborate closely with cross-functional teams to integrate security measures into the development and deployment processes.
• Conduct security assessments of cloud infrastructure and applications, identifying vulnerabilities and recommending remediation measures.
• Define and enforce cloud security policies and standards, ensuring compliance with industry regulations and internal requirements.
• Implement and maintain cloud-native security monitoring and incident response capabilities, ensuring timely detection and response to security incidents.
• Stay up to date with the latest cloud security trends, emerging threats, and industry best practices, incorporating them into our security strategy and practices.
• Drive the adoption of security automation and tooling to improve operational efficiency and reduce risk.
• Collaborate with external partners and vendors to evaluate and select security technologies and solutions.

• Minimum of 8 years of experience in information security, with a focus on cloud security and application security.
• Proven experience leading and managing security engineering teams in a fast-paced technology company.
• Deep understanding of cloud platforms such as AWS, Azure, or GCP, and their respective security services and features.
• Strong knowledge of cloud security principles, including network security, encryption, identity and access management, and secure software development.
• Familiarity with relevant security and compliance frameworks such as ISO 27001, NIST, GDPR, and SOC 2.
• Experience in conducting security assessments, vulnerability management, and incident response in cloud environments.
• Strong leadership skills with the ability to mentor and develop team members, and collaborate effectively with cross-functional teams.
• Excellent communication skills, both verbal and written, with the ability to articulate security concepts to technical and non-technical stakeholders.
• Relevant industry certifications such as CISSP, CCSP, CCSK, AWS Certified Security – Specialty, or AWS Solutions Architect are highly desirable.
• Passion for security, staying up to date with the latest industry trends and technologies, and driving continuous improvement in cloud security practices.