Senior Manager - Security Engineering

Ferguson
United States
Workplace: HybridFull timeUSD 9,458.97 - 16,551.03 monthlyFunction: CybersecuritySkills: ["Leadership","Communication","Organizational skills","Vendor management","Executive-level communication"]

Lead Ferguson’s enterprise security engineering capabilities by building and managing a high-performing team and owning risk-based security services. Drive security-by-default practices across vulnerability management, DevSecOps, penetration testing, edge/email/endpoint security, cloud posture and configuration risk, and application security testing. Partner with security architecture, operations, GRC, identity, and technology teams to harden baselines, remediate findings, improve tooling integrations, and deliver executive-ready risk and remediation reporting.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Ferguson
Ferguson
3 days ago

Senior Manager - Security Engineering

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 21 hours agoStatus: Live

Job Summary

Lead Ferguson’s enterprise security engineering capabilities by building and managing a high-performing team and owning risk-based security services. Drive security-by-default practices across vulnerability management, DevSecOps, penetration testing, edge/email/endpoint security, cloud posture and configuration risk, and application security testing. Partner with security architecture, operations, GRC, identity, and technology teams to harden baselines, remediate findings, improve tooling integrations, and deliver executive-ready risk and remediation reporting.
Location: United States
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Build, lead, and develop the Security Engineering team through recruiting, hiring, coaching, mentorship, performance management, and career development.
  • •Define and maintain the operating model, service ownership, roadmap, and measurable objectives for security engineering capabilities (vulnerability management, DevSecOps, penetration testing, edge/email/endpoint security, cloud posture, and configuration risk).
  • •Own and mature risk-based vulnerability management, including asset visibility, scanning, assessment, risk contextualization, remediation tracking, exception management, and leadership reporting.
  • •Advance secure software delivery by integrating security testing and guidance into development workflows (SAST, SCA, container security, secrets protection, code signing, and secure repository practices).
  • •Ensure public-facing and enterprise protections through edge security capabilities (WAF, bot management, CDN/origin protection, API protections) and manage email/endpoint security engineering oversight and posture remediation.

Pay and Benefits

Salary: USD 9,458.97 - 16,551.03 monthly
Perks:Health InsuranceDentalVisionPaid LeaveLife Insurance401kPaid Parental

Key Requirements

  • •Experience leading information security engineering, application security, vulnerability management, cloud security, endpoint security, or related technical security teams.
  • •Experience managing full-time associates, contractors, vendors, and multi-functional delivery partners.
  • •Strong knowledge of vulnerability management, exposure management, application security, DevSecOps, penetration testing, web/API security, cloud security, endpoint protection, email security, and configuration management.
  • •Solid understanding of modern security tooling including SAST, SCA, vulnerability scanning, WAF, bot management, EDR, CSPM, SIEM integrations, secrets management, certificate management, and identity-related security platforms.
  • •Knowledge of security frameworks and standards such as NIST CSF, ISO 27001/27002, OWASP, MITRE ATT&CK, and CIS Benchmarks.
Experience:Information securitySecurity engineeringApplication securityVulnerability managementCloud securityEndpoint security
Skills:LeadershipCommunicationOrganizational skillsVendor managementExecutive-level communication
Certifications:CISSPCISMCCSPGIACAzure SecurityAWS Security
Tech Stack:Vulnerability managementExposure managementDevSecOpsPenetration testingWeb application securityAPI securityCloud security postureConfiguration managementSASTSCAContainer securitySecrets managementCode signingWAFBot managementCDN securityEDRCSPMSIEM integrationsCertificate management

Company Brief

Ferguson
A major distributor of plumbing, HVAC, waterworks, and industrial products serving residential and commercial construction, maintenance, and repair customers across North America through branches, showrooms, and digital channels.
Industry: Wholesale & Distribution
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Newport News, United States
Founded: 1887
WebsiteLinkedIn