Technical Program Manager

Aquent is partnering with an innovative company at the forefront of autonomous mobility technology. This organization is developing a next-generation transportation solution that combines advanced software, hardware, and connected systems. We're seeking a Technical Program Manager, Product Security to drive cybersecurity initiatives, coordinate vulnerability management efforts, and help ensure security is integrated throughout the software development lifecycle.

About the Opportunity

We are seeking an experienced Technical Program Manager, Product Security to lead cross-functional cybersecurity programs with a primary focus on software vulnerability management, remediation, and product security.

In this role, you'll partner closely with software engineering and cybersecurity teams to identify, prioritize, and resolve security vulnerabilities across internally developed software, third-party applications, open-source components, and cloud-based services. You'll develop remediation plans, coordinate engineering efforts, track progress, and ensure security initiatives move forward despite competing priorities.

The ideal candidate brings a strong understanding of cybersecurity and software development, combined with the ability to manage complex technical programs and communicate effectively with engineering teams and senior leadership. Experience in automotive cybersecurity is a plus, but candidates from other industries with relevant software security experience are encouraged to apply.

This is a long-term W2 contract opportunity based in Foster City, CA, with a hybrid schedule requiring at least 3 days onsite per week. The initial contract runs from January 5, 2027, through January 7, 2028, with potential for extension based on performance and business needs.

What You'll Do

• Lead cross-functional technical programs focused on product security, software vulnerability management, and cybersecurity risk reduction.
• Partner with software engineering and cybersecurity teams to identify, assess, prioritize, and remediate security vulnerabilities across internally developed software, third-party applications, and open-source components.
• Develop and manage vulnerability remediation plans, establish milestones, track progress, and drive resolution of identified security risks.
• Coordinate remediation efforts across multiple software development teams, ensuring vulnerabilities are addressed within established priorities and timelines.
• Work with security teams to understand findings from code scanning tools, penetration testing, red teaming, and other security assessment activities.
• Translate cybersecurity priorities into actionable project plans, roadmaps, schedules, and deliverables.
• Support security initiatives across software applications, cloud environments, embedded systems, and connected technologies.
• Identify program risks, dependencies, and bottlenecks, proactively escalating issues and driving cross-functional solutions.
• Develop and improve processes, tools, and workflows to strengthen vulnerability tracking, security program execution, and operational efficiency.
• Create clear technical presentations, program updates, and status reports to communicate risks, remediation progress, priorities, and accomplishments to engineering teams and leadership.
• Facilitate collaboration across engineering, product, cybersecurity, and other stakeholders to ensure successful execution of security initiatives.

What You'll Bring

• Bachelor's or master's degree in Computer Science, Engineering, or a related technical field, or equivalent professional experience.
• 6+ years of experience in engineering, technical program management, or management consulting, including experience leading complex, cross-functional technical initiatives.
• Strong cybersecurity background, with direct experience working on cybersecurity initiatives or closely partnering with cybersecurity and software security teams.
• Experience working with software development teams, with an understanding of software development processes, security vulnerabilities, and remediation workflows.
• Familiarity with vulnerability management, security risk assessments, and common cybersecurity concepts, including application security, network security, or secure software development.
• Ability to understand and communicate technical security findings, coordinate remediation efforts, and drive progress across multiple engineering teams.
• Experience managing technical projects involving competing priorities, cross-functional dependencies, and complex stakeholder relationships.
• Strong technical and analytical skills, with the ability to translate cybersecurity requirements into actionable plans and measurable deliverables.
• Excellent communication and organizational skills, including the ability to present technical information clearly to engineering teams and senior leadership.
• Proven ability to influence stakeholders, build strong working relationships, and drive program execution without direct authority.

Nice-to-Have Qualifications

• Previous experience as a software developer, security engineer, or DevSecOps professional who transitioned into technical program management.
• Experience managing DevSecOps, application security, product security, or cloud security programs.
• Familiarity with code scanning and security assessment tools, such as SonarQube or similar technologies.
• Understanding of penetration testing, red teaming, and vulnerability remediation processes.
• Experience with security initiatives involving cloud environments, including AWS, Google Cloud, or other cloud platforms.
• Experience managing cybersecurity programs in automotive, aviation, consumer electronics, telecommunications, rail, or other complex technical industries.
• 5+ years of automotive cybersecurity program management experience.
• Familiarity with automotive cybersecurity standards such as ISO/SAE 21434 and UNECE WP.29.
• Understanding of embedded systems, connected vehicle technologies, or automotive communication protocols such as CAN, Ethernet, and V2X.