Job description

This role will be based in Mountain View, CA. At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team. About the team: LinkedIn's members entrust us with their information every day and we take their security seriously. Our core value of putting our members first powers all the decisions we make, including how we manage and protect the data of our members and customers. Information Security at LinkedIn is dedicated to protecting and securing business-critical member data and company assets. Our core mission is to empower LinkedIn to create a secure and thriving platform for every member of the global workforce. We’re hiring a Staff Security Technical Program Manager to drive execution across our Production and Enterprise Security organization. You’ll own critical programs such as vulnerability management, lead cross-functional security initiatives, and establish the operating rhythm that keeps teams aligned on priorities, OKRs, milestones, and outcomes. You’ll bring structure to complex programs, surface risks and dependencies early, drive decisions to closure, and ensure commitments don’t fall through the cracks. You’ll provide leadership with clear, accurate program status while serving as a force multiplier for engineers by removing blockers and creating clarity without adding unnecessary process. About the role: We are seeking a Security Technical Program Manager to join LinkedIn’s centralized TPM Infra organization. In this critical role, you will build and scale a mature production and enterprise security architecture to protect our global platform, members, and organizational assets. You will serve as a key driver across security governance, operational cadences, metrics telemetry, cross-functional program execution, and executive accountability for production and enterprise risk reduction. Responsibilities: • Lead end-to-end security remediation strategy across the products and infra org by consolidating findings from threat models, code reviews, penetration tests, vulnerability assessments, audits, and postmortems into a unified backlog with clear ownership, prioritization, and defined SLAs. • Establish standardized frameworks for risk identification, tracking, exception management, escalation paths, and remediation validation to ensure operational consistency across security programs. • Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability. • Establish organizational operating rhythms, including goal setting, dependency mapping, key milestone tracking, and quarterly executive readouts, to maintain continuous visibility into OKR execution across security initiatives. • Manage the vulnerability management lifecycle, including scanning scope, remediation cadences, risk exception workflows, and executive reporting on organizational risk posture. • Partner with cross-functional stakeholders to ensure third-party security evaluations remain efficient, standardized, and transparent for internal requesters. • Drive complex security programs from initiation to delivery by orchestrating work across Security, IT, Legal, HR, and Compliance partners while ensuring accountability on deliverables. • Establish organizational operating rhythms, including sprint planning, OKR tracking, and backlog governance, to maintain continuous visibility into program execution. • Elevate documentation standards for program specifications, standard operating procedures, architectural decisions, and incident action items to maintain clarity and discoverability. • Establish metrics and key performance indicators to evaluate program effectiveness and convert security telemetry into actionable technical insights. • Lead postmortem reviews and remediation governance for major security incidents, converting key takeaways into resilient architectural controls, automated mechanisms, and updated operating procedures. • Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability. Basic Qualifications • Bachelor's degree in Computer Science, Engineering, Information Systems, Business, Finance, or a related field. • 7+ years of experience in technical program management, including a minimum of 3 years leading complex security initiatives. • Demonstrated track record of orchestrating company-wide vulnerability management lifecycles, driving cross-functional remediation, establishing governance SLAs, and reporting posture metrics to leadership. • Technical expertise to engage effectively with engineering teams, evaluate security risk factors, and navigate fundamental information protection principles across complex domains. • Technical depth to engage effectively with security engineers, assess threat severity, evaluate exploitability, and critically review risk determinations. • Extensive experience managing agile operating rhythms, OKR tracking, task management platforms (such as Jira or Linear), documentation repositories, and executive reporting dashboards. • Exceptional written communication skills with an emphasis on clarity, brevity, and structured documentation. • Proven ability to partner effectively across engineering, IT, Legal, HR, and Compliance teams to achieve business alignment and deliver organizational results. • Collaborative mindset with high emotional intelligence and an inclusive approach to problem-solving across diverse organizations. Preferred Qualifications • BS and 8+ years of relevant work experience • Demonstrated history of partnering with engineering organizations to deliver high-impact, enterprise-scale security initiatives. • Outstanding written and verbal communication capabilities, with a proven track record of adapting complex messaging for diverse technical and executive audiences. • Proven ability to influence cross-functional partners and engineering leadership to align priorities and advance key security programs. Suggested Skills • Strategic Portfolio Management • Executive Influence & Stakeholder Leadership • Enterprise Program Delivery • Operating Model & Governance • Executive Communication & Risk Management • Comprehensive understanding of fundamental information security paradigms and security architecture principles LinkedIn is committed to fair and equitable compensation practices. The pay range for this role is $144,000 to $237,000. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, certifications, and specific work location. This may be different in other locations due to differences in the cost of labor. The total compensation package for this position may also include annual performance bonus, stock, benefits and/or other applicable incentive compensation plans. For more information, visit careers.linkedin.com. Equal Opportunity Statement We seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. LinkedIn is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful. If you need a Reasonable Accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us and describe the specific Accommodation requested for a disability-related limitation. Fill out an Accommodation request here: app.smartsheet.com Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to: • Documents in alternate formats or read aloud to you • Having interviews in an accessible location • Being accompanied by a service dog • Having a sign language interpreter present for the interview A request for an accommodation will be responded to within three business days. However, non-disability related requests, such as following up on an application, will not receive a response. LinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by LinkedIn, or (c) consistent with LinkedIn's legal duty to furnish information. San Francisco Fair Chance Ordinance Pursuant to the San Francisco Fair Chance Ordinance, LinkedIn will consider for employment qualified applicants with arrest and conviction records. Pay Transparency Policy Statement As a federal contractor, LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: lnkd.in. Global Data Privacy Notice and Compliance Posters for Job Candidates Please use this link to access documents that provide information about how LinkedIn handles the personal data of employees and job applicants, as well as the E-Verify Participation Notice and the Department of Justice Immigrant and Employee Rights Section Right to Work posters: linkedin.com.

Requirements

Must-haves

Establish standardized frameworks for risk identification, tracking, exception management, escalation paths, and remediation validation to ensure operational consistency across security programs.
Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability.
Manage the vulnerability management lifecycle, including scanning scope, remediation cadences, risk exception workflows, and executive reporting on organizational risk posture.
Partner with cross-functional stakeholders to ensure third-party security evaluations remain efficient, standardized, and transparent for internal requesters.
Drive complex security programs from initiation to delivery by orchestrating work across Security, IT, Legal, HR, and Compliance partners while ensuring accountability on deliverables.
Establish organizational operating rhythms, including sprint planning, OKR tracking, and backlog governance, to maintain continuous visibility into program execution.
Elevate documentation standards for program specifications, standard operating procedures, architectural decisions, and incident action items to maintain clarity and discoverability.
Establish metrics and key performance indicators to evaluate program effectiveness and convert security telemetry into actionable technical insights.
Lead postmortem reviews and remediation governance for major security incidents, converting key takeaways into resilient architectural controls, automated mechanisms, and updated operating procedures.
Define standardized metrics and telemetry dashboards to deliver actionable risk insights for leadership, enabling proactive tracking of systemic vulnerabilities and cross-team remediation accountability.
Bachelor's degree in Computer Science, Engineering, Information Systems, Business, Finance, or a related field.
7+ years of experience in technical program management, including a minimum of 3 years leading complex security initiatives.
Demonstrated track record of orchestrating company-wide vulnerability management lifecycles, driving cross-functional remediation, establishing governance SLAs, and reporting posture metrics to leadership.

Nice-to-haves

Demonstrated history of partnering with engineering organizations to deliver high-impact, enterprise-scale security initiatives.
Outstanding written and verbal communication capabilities, with a proven track record of adapting complex messaging for diverse technical and executive audiences.
Proven ability to influence cross-functional partners and engineering leadership to align priorities and advance key security programs.
Suggested Skills
Strategic Portfolio Management
Executive Influence & Stakeholder Leadership
Enterprise Program Delivery
Operating Model & Governance
Executive Communication & Risk Management
Comprehensive understanding of fundamental information security paradigms and security architecture principles
LinkedIn is committed to fair and equitable compensation practices.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agilejira

Platform: smartrecruiters
Effort: medium

Benefits

Benefits detected in the listing.

Vision