--- title: 'Manager, Information Security at Synack' canonical: 'https://feeny.ai/job/manager-information-security-synack-in-the-zghcaztj17f1' type: 'job' last_seen: '2026-09-11' --- # Manager, Information Security at Synack - **Company:** Synack - **Location:** IN the, United States - **Work type:** remote - **Posted:** 2026-08-28 - **Last confirmed live:** 2026-09-11 - **Apply:** https://job-boards.greenhouse.io/synack/jobs/8156469 ## Job description Synack’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We are committed to making the world more secure by harnessing a talented, vetted community of security researchers to deliver continuous penetration testing and vulnerability management, with actionable results. Synack's PTaaS platform has uncovered more than 71,000 exploitable vulnerabilities to date, protecting a growing list of Global 2000 customers and U.S. agencies in a FedRAMP Moderate Authorized environment. For more information, please visit [www.synack.com](http://www.synack.com/). We are looking for a talented Information Security Compliance Manager with deep expertise in ISO, SOC, CMMC and FedRAMP compliance. You will work closely with the Product, Engineering, and Operations teams to ensure proper security controls and monitoring are applied. Sounds interesting? Keep reading… **Please note that due to federal government contract requirements, we can only hire a citizen of the United States into this role. Here’s what you'll do - Automate generation of System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes. - Develop and maintain automated Plans of Action and Milestones (POAMs). - Contribute to the adoption and implementation of automation and use of Artificial Intelligence (AI) within Synack's Information Security operations. - Own the inventory and risk assessments of AI/agentic systems used across Synack, aligned to NIST AI RMF and ISO 42001, including data handling, model and agent change control, non-human identity and credential scoping. - Build and own automated evidence collection and control-drift around security controls. - Communicate regularly with stakeholders on security compliance issues aligning to CIS and NIST standards, track mitigation/remediation tasks, and assisting in generation of reports and metrics. - Codify security controls into IaC guardrails, CNAPP policies, and CI/CD checks to prevent risks at commit and deploy time. - Working with Project Managers and Software Engineers in a collaborative and enabling (non-obstructive) manner; Ensuring appropriate information security policies, standards, procedures, and guidelines are being incorporated across Synack hosted services and infrastructure, with a focus on hardening and adhering to DevSecOps principles. - Coordinate with the field teams to respond to vendor security assessments and conduct 3rd party risk assessments of Synack vendors. Here’s what you’ll need - 8+ years of experience IT Security Strategy, Risk Management, IT Audit and Compliance with a Cloud Service Provider - Experience with Python, Terraform, and CI/CD pipelines, plus comfort integrating tools with AI. - Experience with Enterprise Governance, Risk Management, and Compliance (GRC) tools. - Experience with event monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel. - Experience with SOAR or auto-remediation platforms and detection engineering / SIEM query languages. - Experience with Cloud Native Application Protection Platforms (CNAPP). - Experience with leveraging security tools within the Software Development Lifecycle (SDLC). - Familiarity with secrets management and workload identity (non-human). - Working knowledge of security regulations, standards, and frameworks, including but not limited to ISO27000, ISO42001, OWASP, SOC2, GDPR, CMMC, FedRAMP, and NIST. - Excellent written and verbal communication skills with the ability to accurately communicate security and risk-related information to technical and non-technical audiences. Ready to join us? Synack is committed to embracing diversity. Our people are our strength.  Each addition to our team is an opportunity to grow and diversify our ideas, experiences, and viewpoints. Synack strives to be inclusive of all people. As a candidate, Synack cares about your privacy. Please view our [candidate privacy policy](https://www.synack.com/candidate-privacy-notice/). This position has responsibility to ensure Synack’s security and privacy posture is maintained. $150,000 - $180,000 Salary is determined by a combination of factors including location, level, relevant experience, and skills. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. The compensation package for this position may also include equity, and benefits. For more details about our benefits, please see [our benefits overview](https://synack.mybenefits.life/). Then for the Employer code, enter: synack ## About Synack ## Company Overview - **One-liner**: Synack provides an AI-powered Penetration Testing as a Service (PTaaS) platform that fuses intelligent AI agents with a vetted community of human security researchers to deliver continuous, high-fidelity security validation. - **Entity Type**: Private (Series D) - **Headquarters**: Redwood City, California, United States - **Founded**: 2013 - **Founders**: Jay Kaplan (CEO and Co-founder) ## Core Business - **Primary industry**: Computer and Network Security / Cybersecurity - **Target customers**: B2B, Enterprise, specifically security teams managing complex attack surfaces in global financial systems, U.S. Department of Defense, and other critical infrastructure sectors. - **Mission or purpose statement**: To make the world more secure by leveraging global security talent coupled with advanced technology to help enterprises discover security vulnerabilities before they become business problems. ## Products & Services - **Synack Platform (PTaaS)**: A platform that combines the speed and scale of intelligent AI agents with the judgment of vetted human testers. It delivers continuous, high-fidelity assessments that go beyond automated scans, covering web applications, APIs, cloud environments (AWS, Azure, GCP), and hosts. - **Attack Surface Management**: Continuously discovers, fingerprints, and prioritizes internet-facing assets for immediate testing. - **AI Pentesting**: Automated pentesting launched in days, using both human and AI agents to filter out 99.98% of noise, delivering only verified, real vulnerabilities. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (Private company). - **Key Metric**: Total Funding of **$107.6M** across 7 rounds. Annual Revenue estimated at **$37.0M**. - **Notable Investors/Partners**: Backed by top-tier venture capital firms including **Kleiner Perkins Caufield & Byers**, **Microsoft (M12 - Microsoft's Venture Fund)**, and **Google Ventures**. Other investors include Icon Ventures and Notable Capital. - **Growth Signals**: Enables nearly 10 million hours of expert testing. Protects U.S. Department of Defense networks. Headcount of 192 employees (+0.4% YoY). Operates in 24 countries. Named "Fast" in flexibility, value, and scalability compared to other PTaaS vendors. ## Competitive Advantages - **Human + AI Fusion**: Unique model combining the speed of AI agents with the intuition and creativity of highly vetted human security researchers (the Synack Red Team) to find logic flaws, chained exploits, and subtle vulnerabilities that automated tools miss. - **Noise Reduction**: Filters out 99.98% of false positives, delivering only verified, exploitable vulnerabilities. - **Elite Talent Pool**: Access to at least 35 highly qualified penetration testers per engagement, drawn from a global community of vetted security researchers. - **Military-Grade Origin**: Founded by former NSA cybersecurity operators, bringing military-grade discipline and adversarial thinking to enterprise security. - **Proven Track Record**: 47% faster vulnerability remediation, 32% lower pentesting costs, and 22 days saved per pentest. ## Strategic Focus - **Continuous Security Validation**: Moving away from periodic testing to a continuous, always-on model. - **AI Innovation**: Deepening the integration of agentic AI to enhance the speed and scale of testing. - **Expanding Attack Surface Coverage**: Continuously discovering and testing new assets across cloud, API, and ephemeral environments. - **Protecting Critical Infrastructure**: Deep focus on securing global financial systems, defense networks, and other sensitive sectors. ## Why Work Here - **Culture**: Fast-paced, global company with a culture of inclusion, innovation, and interconnectedness. Core values include innovation, respect, trust, transparency, and a passion for the mission. - **Work Model**: Remote in the US. Most roles listed are remote-first. - **Benefits**: Competitive compensation packages, comprehensive medical/dental/vision coverage (US), generous paid parental leave, and ample holidays and time off ("work hard to play hard"). - **Engineering Culture**: Focus on solving big problems with tenacity and innovation. Teams are empowered to take on tough challenges. R&D roles include Senior Software Engineer, AI; Director, Software Engineering, AI; and DevOps Engineer. - **Team**: Diverse workforce with employees across 24 countries. Technical roles make up the largest department (26%). Notable talent sources include Bugcrowd, HackerOne, and FireEye. ## Sources 1. [synack.com](https://www.synack.com/) 2. [synack.com - About](https://www.synack.com/about/) 3. [synack.com - Careers](https://www.synack.com/careers/) 4. [LinkedIn - Synack](https://www.linkedin.com/company/synack-inc-) 5. [Greenhouse - Synack Jobs](http://job-boards.greenhouse.io/synack) ## Other roles at Synack - [Graduate Software Engineer](https://feeny.ai/job/graduate-software-engineer-synack-in-the-8waszyhv4k9r) — IN the, United Kingdom - [Product Manager, AI](https://feeny.ai/job/product-manager-ai-synack-in-the-8chtcex5v6h9) — IN the, United States - [Technical Account Manager, Federal (Penetration Testing)](https://feeny.ai/job/technical-account-manager-federal-penetration-testing-synack-washington-x61n3678p17m) — Washington, DC - [Senior SDET](https://feeny.ai/job/senior-sdet-synack-in-the-52dw5wda21s3) — IN the, United States - [Software Engineer, AI (Level determined by experience)](https://feeny.ai/job/software-engineer-ai-level-determined-by-experience-synack-in-the-wrcrvswth2mc) — IN the, United Kingdom - [Director, Product Marketing](https://feeny.ai/job/director-product-marketing-synack-in-the-xev4h3ap9s01) — IN the, United States - [Regional Sales Director](https://feeny.ai/job/regional-sales-director-synack-in-the-mountain-region-of-the-1njg7rh6tw7b) — IN the Mountain Region of the, United States - [Regional Sales Director](https://feeny.ai/job/regional-sales-director-synack-chicago-xcw94nq5bkd7) — Chicago, IL - [Software Engineer - AI (Level determined by experience)](https://feeny.ai/job/software-engineer-ai-level-determined-by-experience-synack-in-the-09x8527gsr2v) — IN the, United States - [Regional Sales Director](https://feeny.ai/job/regional-sales-director-synack-new-york-cg8fje6exces) — New York, NY