About this opportunity
Atomic Machines lists this Technical Manager - Information Security opportunity in emeryville, California. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Atomic Machines is ushering in a new era of micromanufacturing with its Matter Compiler™ technology. This full-stack technology enables new classes of micromachines to be designed and built by offering manufacturing processes and a materials library that is inaccessible to semiconductor manufacturing methods. It promises to unlock MEMS manufacturing for the many device classes frustrated by semiconductor methods and to open up entirely new product classes. The Matter Compiler™ technology fully realizes the digital manufacturing dream: bits and raw materials go in, and complete, functional micromachines come out. The Atomic Machines team has also created an exciting first device – one that was only made possible by the existence of the Matter CompilerTM technology – that we will be unveiling to the world soon.
Our offices are in Emeryville and Santa Clara, California.
About the Role:
The Technical Manager, Cybersecurity Engineering is a hands‑on individual contributor and technical leadership role responsible for the strategy, implementation, and lifecycle management of enterprise cybersecurity technologies across a complex high-tech manufacturing environment.
This role will lead security engineering across cloud, endpoint, identity, network, and Operational Technology/Industrial Control Systems (OT/ICS) environments. You will own the technical direction of our detection and response program, strengthen AWS and infrastructure security, manage security vendors and external engineering resources, and serve as a senior escalation point for complex security incidents.
You will partner closely with IT, infrastructure, platform engineering, and business leaders to embed scalable security controls into our technology environment while helping shape security standards, architecture, and long‑term strategy.
This is a full‑time position based in either our Emeryville or Santa Clara office, with occasional work from the other office as needed.
What You’ll Do:
Security Engineering & Detection
Lead the detection and response program across cloud, SaaS, endpoint, identity, network, and manufacturing environments.
Own the lifecycle of enterprise security tools, including SIEM, EDR/XDR, vulnerability management, network visibility, and related security platforms.
Manage SIEM operations, including data onboarding, detection engineering, correlation rules, alert tuning, and telemetry optimization.
Develop automation and response playbooks that reduce alert fatigue and improve mean time to detect and respond (MTTD/MTTR).
Serve as a senior escalation point during complex security incidents and lead technical analysis, response coordination, and post‑incident remediation.
Use threat modeling to identify high‑risk attack paths and address gaps in detection coverage and security controls.
Cloud & Identity Security
Define and enforce security standards across AWS environments, including IAM, Security Hub, GuardDuty, CloudTrail, Config, Inspector, Macie, WAF, VPCs, and AWS Organizations/SCPs.
Establish scalable controls for least‑privilege access, cloud configuration, network segmentation, logging, and automated compliance.
Partner with infrastructure and platform teams to embed security into CI/CD pipelines, infrastructure‑as‑code (IaC), and cloud architecture.
Govern cloud identity and access controls, including role‑based access, MFA, privileged access, and service control policies.
Network & OT/ICS Security
Help design and enforce network security controls, including firewalls, ZTNA, NAC, micro‑segmentation, IDS/IPS, and network hardening.
Conduct and support vulnerability assessments, penetration testing, and remediation across enterprise and manufacturing environments.
Assess OT/ICS cybersecurity risks and develop practical remediation strategies that protect manufacturing operations without disrupting production.
Design secure segmentation and access controls for OT/IT convergence and Industrial Control System environments.
Support on‑call and escalation protocols for critical security and network events.
Provide technical direction and mentorship to internal engineers and external security resources.
Manage MSSPs and security vendors, ensuring performance against SLAs, security outcomes, and quality standards.
Evaluate security technologies and vendor partnerships based on business, technical, and regulatory requirements.
Establish security reference architectures, design patterns, technical standards, and operating models.
Partner across IT, infrastructure, engineering, and leadership teams to ensure security is incorporated into technology decisions from the outset.
Governance & Compliance
Develop and maintain security standards, policies, and procedures aligned with frameworks such as NIST, SOC 2, and ISO 27001.
Support audits through technical documentation, evidence collection, control validation, and remediation.
Clearly communicate cybersecurity risks, business impact, and recommended mitigations to technical and non‑technical stakeholders.
What You’ll Need:
8+ years of progressive cybersecurity engineering experience, including 2–3+ years in a technical lead or management capacity.
Experience leading internal technical resources and managing external vendors or MSSPs.
Hands‑on expertise with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Rapid7, or equivalent, including detection engineering, data onboarding, and tuning.
Strong working knowledge of AWS security, including IAM, Security Hub, GuardDuty, CloudTrail, Config, Inspector, Macie, WAF, VPC security, and SCPs.
Experience with enterprise network security, vulnerability management, endpoint security, and identity/access management.
Experience developing security automation using SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, Tines, or equivalent, along with scripting in Python or PowerShell.
Familiarity with threat modeling frameworks such as MITRE ATT&CK or STRIDE.
Experience with OT/ICS cybersecurity in manufacturing, industrial, or critical infrastructure environments is strongly preferred.
Relevant certifications such as CISSP, CISM, AWS, GIAC, GCIH, GCIA, Security+, PCNSE, or Splunk certifications are a plus.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, or equivalent education and experience.
Technical Skills:
SIEM & Detection: Splunk ES, Microsoft Sentinel, Rapid7, Palo Alto; detection engineering, correlation, alert tuning, and log management
Cloud Security: AWS Security Hub, GuardDuty, CloudTrail, Config, Macie, Inspector, WAF, IAM, SCPs, VPC security, AWS Organizations
Security Infrastructure: EDR/XDR, firewalls, IDS/IPS, vulnerability scanners, NAC, ZTNA, and network segmentation
Identity & Access: AWS IAM, Okta, Microsoft Entra ID, CyberArk/BeyondTrust, MFA, PAM, and least‑privilege access
OT/ICS Security: Dragos, Claroty, Nozomi, Purdue Model, IEC 62443, and industrial network segmentation
#J-18808-Ljbffr
Worksite address
emeryville, CA, 94608, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.