[Hiring] Senior Manager, Security Operations @Calendly

Role Description

We are seeking a highly technical and strategic Senior Manager of Product Security & Security Operations to lead, mature, and scale both functions. This leader will build strong partnerships across Product and Engineering, embed security throughout the software development lifecycle, and strengthen Calendly’s ability to detect and respond to threats.

The ideal candidate combines product and application security depth with strong security operations experience. They will lead teams, set strategy, and remain close enough to the work to guide architecture reviews, vulnerability remediation, detection engineering, investigations, and high-severity incidents.

Key Responsibilities

• Lead the Product Security and Security Operations teams, developing talent and holding the teams accountable for measurable outcomes.
• Define strategy, operating plans, metrics, and resource priorities aligned with Calendly’s highest risks.
• Build strong partnerships across Security and with key cross-functional teams to align on risk, response, and remediation.
• Communicate priorities, risk tradeoffs, and program performance to senior leadership and cross-functional stakeholders.
• Scale product security capabilities, including threat modeling, application security testing, vulnerability management, and developer enablement.
• Lead detection engineering, incident response, threat intelligence, monitoring, and threat hunting capabilities.
• Guide high-severity incidents, complex investigations, and security reviews, driving durable remediation of systemic issues.
• Establish standards for control coverage and effectiveness across applications, cloud, identity, and endpoints.
• Manage program budgets and strategic security vendors.

Qualifications

• 7+ years of cybersecurity experience across product, application, or infrastructure security, plus security operations, incident response, or detection engineering.
• 4+ years managing experienced security engineers or multidisciplinary technical teams.
• Strong communication skills and the ability to navigate sensitive decisions with technical teams and senior leaders.
• Experience defining strategy and delivering measurable outcomes across multiple security disciplines.
• Experience building or scaling product security programs with Product and Engineering teams.
• Strong knowledge of secure software development, threat modeling, application security testing, vulnerability management, and cloud-native architectures.
• Strong knowledge of incident response, detection engineering, SIEM, EDR, cloud security, and identity security.
• Experience translating ambiguous risks into prioritized, cross-functional programs and driving remediation through influence.
• Experience managing budgets, MSSPs, testing firms, or other security providers.
• Authorization to work in the United States, as Calendly does not provide immigration sponsorship at this time.

Requirements

• If you are an individual with a disability and would like to request a reasonable accommodation as part of the application or recruiting process, please contact us at [email protected].
• Calendly is registered as an employer in many, but not all, states. If you are located in Alaska, Alabama, Delaware, Hawaii, Idaho, Montana, North Dakota, South Dakota, Nebraska, Iowa, West Virginia, and Rhode Island, you will not be eligible for employment.
• Note that all individual roles will specify location eligibility.
• This role may require occasional travel for company events, team collaboration, or offsites.

Benefits

• Base salary is just one component of Calendly’s total rewards package.
• All full-time (30 hours/week) employees are also eligible for our Top Performer Bonus program (or Sales incentive), equity awards, and competitive benefits.
• Calendly uses the zip code of an employee’s remote work location, or the onsite building location if hybrid, to determine which metropolitan pay range we use.
• Current geographic zones are as follows:
• Tier 1: San Francisco, CA, San Jose, CA, New York City, NY
• Tier 2: Chicago, IL, Austin, TX, Denver, CO, Boston, MA, Washington D.C., Philadelphia, PA, Portland, OR, Seattle, WA, Miami, FL, and all other cities in CA.
• Tier 3: All other locations not in Tier 1 or Tier 2