Security Operations Engineering Manager

At Webflow, our mission is to bring development superpowers to everyone. Webflow is a Website Experience Platform (WXP) that empowers modern marketing teams to visually build, manage, and optimize stunning websites. With AI-driven personalization baked in, Webflow enables teams to significantly boost conversion rates, translating directly into measurable business growth. From independent designers and creative agencies to Fortune 500 companies, millions worldwide use Webflow to be more nimble, creative, and collaborative.

We’re looking for a Security Operations Engineering Manager on Webflow's new Security and Compliance team, you will work with the Director of Product Security to help us meet current and future product security needs. 

About the role 

• Location: San Francisco or Remote
• Full-time
• Permanent 
• Exempt 
• The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills.
  • United States  (all figures cited below in USD and pertain to workers in the United States)
    • Zone A: $187,000 - $263,500
    • Zone B: $175,000 - $247,000
    • Zone C: $164,00 - $231,500
  • Canada  (All figures cited below in CAD and pertain to workers in ON & BC, Canada)
    • CAD 212,000 - CAD 299,000

As a Security Operations Engineering Manager , you will … 

• Collaborate with the infrastructure engineering team to secure Webflow’s AWS deployment and procedures.
• Partner directly with Engineering Leadership to champion  security standards while balancing business strategies and requirements.
• Support the DevOps engineers responsible for Webflow’s security current and future frameworks such as SOC2
• Cross-train other security engineers on infrastructure security, incide response, and vulnerability management  strategies
• Manage Infrastructure Security Engineering, Incident Response, Corporate Security, and vulnerability management team members, 

That said, these responsibilities are just the start! At Webflow, we encourage you to contribute wherever your interests take you — and shape your role accordingly. And this isn’t just a philosophical bent: we actually give you 4 hours a week (10% of the work week) to pursue passion projects outside of your role responsibilities. 

About you 

You’ll thrive as (a) Security Operations Engineering Manager if you:

• Are passionate about security in general, and always hungry to learn
• Proven track record managing security operations. Minimum 4 years of management experience.
• Strong experience managing the following security disciplines:
• Security DevOps
• vulnerability management
• incident response
• corporate security.
• Ability to work effectively and cross-functionally with all levels of management, both internally and externally
• Strong collaboration and communication skills.
• A passion for data analysis and reporting
• Expertise in process improvement to identify and enhance operational efficiencies.
• Data Analysis: Strong analytical skills are required, preferably with experience in using data analysis tools or software. 
• You should be capable of interpreting complex data, identifying trends, and making data-driven decisions.
• Project management skills (PMP or other project management certification a plus)

Even if you don’t meet 100% of the above qualifications, you should still seriously consider applying. Research shows that you may still be considered for a role if you meet just half of the requirements.

Our Core Behaviors:

• Obsess over customer experience. We deeply understand what we’re building and who we’re building for and serving. We define the leading edge of what’s possible in our industry and deliver the future for our customers.
• Move with heartfelt urgency. We have a healthy relationship with impatience, channeling it thoughtfully to show up better and faster for our customers and for each other. Time is the most limited thing we have, and we make the most of every moment.
• Say the hard thing with care. Our best work often comes from intelligent debate, critique, and even difficult conversations. We speak our minds and don’t sugarcoat things — and we do so with respect, maturity, and care.
• Make your mark. We seek out new and unique ways to create meaningful impact, and we champion the same from our colleagues. We work as a team to get the job done, and we go out of our way to celebrate and reward those going above and beyond for our customers and our teammates.

Benefits & wellness

• Equity ownership (RSUs) in a growing, privately-owned company
• 100% employer-paid healthcare, vision, and dental insurance coverage for employees and dependents (US; full-time Canadian workers working 30+ hours per week), as well as Health Savings Account/Health Reimbursement Account, dependent on insurance plan selection. Employees also have voluntary insurance options, such as life, disability, hospital protection, accident, and critical illness
• 12 weeks of paid parental leave for both birthing and non-birthing caregivers, as well as an additional 6-8 weeks of pregnancy disability for birthing parents to be used before child bonding leave. Employees also have access to family planning care and reimbursement
• Flexible PTO with an mandatory annual minimum of 10 days paid time off, and sabbatical program
• Access to mental wellness coaching, therapy, and Employee Assistance Program
• Monthly stipends to support health and wellness, as well as smart work, and annual stipends to support professional growth
• Professional career coaching, internal learning & development programs
• 401k plan and financial wellness benefits, like CPA or financial advisor coverage
• Commuter benefits for in-office workers

Temporary employees are not eligible for paid holiday time off, accrued paid time off, paid leaves of absence, or company-sponsored perks.

Be you, with us

At Webflow, equality is a core tenet of our culture. We are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law.

Stay connected

Not ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog, LinkedIn, Twitter, and/or Glassdoor. 

Please note:

To join Webflow, you'll need valid U.S. or Canadian work authorization depending on the country of employment.

If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes.

Webflow requires all new employees to submit their COVID-19 vaccination status as a condition of their employment. Your failure to timely provide requested information, may result in the revocation of your offer or the termination of your employment, as applicable.

At this time, Webflow does not permit employees who are not fully vaccinated against COVID-19 to work out of any Webflow office, visit an office, or attend any in person work or company sponsored events. We will only consider individuals who are fully vaccinated against COVID-19 for roles which require any in person work. If, due to the nature of your role, you are at any time required to work in person, but you are not fully vaccinated against COVID-19, subject to applicable regulations, your employment may be terminated.