Senior Technical Program Manager, Security

About the Role

Join Webflow as a Senior Technical Program Manager to drive our critical Security program, ensuring the efficiency and maturity of vulnerability management, application security, and compliance initiatives across the organization.

Responsibilities

• Coordinate security-wide planning across teams, tracking dependencies, aligning priorities, and maintaining roadmap visibility.
• Lead the end-to-end Vulnerability Management lifecycle, from discovery through efficient remediation.
• Manage stakeholder communication and cross-functional alignment, partnering with Engineering to ensure vulnerability ownership and ticket quality.
• Develop and publish vulnerability metrics and dashboards for visibility and accountability.
• Identify and resolve process bottlenecks; drive continuous improvement in the vulnerability lifecycle.
• Collaborate with SMEs in AppSec and SecDevOps to maintain full scanning and tooling coverage (e.g., Socket, container scanning, SCA).
• Maintain VM documentation, operating procedures, and readiness for audits (SOC 2, ISO 27001, ISO 42001).

Requirements

• 3-4 years of program or project management experience in technical domains such as security, infrastructure, or DevOps.
• Proven experience coordinating cross-functional delivery between engineering, security, and operations teams.
• Comfort working with vulnerability management tools and workflows (e.g., Socket, container scanning, SCA, Jira).
• Strong organizational skills, capable of managing timelines, tracking progress, and maintaining clear documentation.
• Excellent communication skills with an emphasis on empathy, proactive risk surfacing, and team alignment.
• Ability to balance speed with security, helping teams make informed tradeoffs that reduce risk without blocking delivery.
• Demonstrated experience improving or building processes that make vulnerability management scalable and predictable.

Nice-to-Haves

• Exposure to security compliance frameworks such as SOC 2, ISO 27001, or ISO 42001.
• Familiarity with security scanning and reporting tools (Socket, Qualys, or equivalent).
• Experience supporting or coordinating incident response or vulnerability triage workflows.
• Background in SaaS or cloud environments with an understanding of common infrastructure patterns.
• Experience developing dashboards or metrics for vulnerability tracking and remediation progress.

Role Impact

This role is essential for scaling Webflow’s security processes, reducing overall risk, and maturing our operational capabilities across the entire security spectrum.