Security Manager, Enterprise

Build a Safer World.

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.

TRM’s Security team secures everything we build and run, and the Enterprise Security team owns identities, endpoints, and core SaaS. As the Enterprise Security Engineering Manager, you will lead the engineers who harden our environment against NIST and CIS benchmarks, and you will make AI-driven automation the way the team works. We are distributed, not distant: a US-based team across Pacific and Eastern time zones that works asynchronously and ships fast.

The impact you will have:

• Build agentic workflows and set the Enterprise Security roadmap, using AI-driven analysis to prioritize work by risk against NIST and CIS benchmarks


• Lead and grow a team of security engineers, coaching them to build with Claude Code and agentic workflows every day


• Drive automation of endpoint baselines (Jamf, Intune, Defender) and identity controls (Entra ID, Google Workspace) with n8n, SlackOps, and Terraform controls-as-code


• Expand TRM’s Security Agent and MCP integrations so routine security tasks are handled by AI with human oversight, and set review standards for AI-generated changes


• Use AI-assisted reporting to give leadership and GRC clear, evidence-backed views of posture, drift, and audit readiness


• Run the team’s on-call program and use automation to reduce its load over time


• Hire, develop, and retain engineers, with AI fluency as a core part of how the team grows


• Partner with IT Operations, GRC, and Engineering to align priorities and remove cross-team blockers

What we’re looking for:

Ability to drive cross-functional engineering projects
Daily, hands-on fluency with AI tools such as Claude Code, and the ability to coach a team to use them with sound judgment
A proven record of managing security or IT engineers, including hiring, performance management, and career growth
An automation-first mindset, with enough hands-on depth in scripting and controls-as-code to review the team’s work
Deep experience with cloud identity providers (Entra ID or Google Workspace) and MDM (Jamf or Intune) on macOS and Windows
A risk-based approach, with the ability to lead cross-layer troubleshooting across endpoint, network, and identity
Strong plus: Terraform or other infrastructure as code, incident response or SOC experience, and AI governance exposure

About the Team:

• A collaborative Security team that treats AI as a core part of how we engineer, not an add-on


• Enterprise Security covers identities, endpoints, and core SaaS, and partners closely with IT Operations and GRC


• We favor building and automating over manual operations, and managers set that example


• US-based and distributed, not distant, with teammates in both Pacific and Eastern time zones

Team Operating Rhythms:

• Work is planned against quarterly OKRs, with about 80% of team capacity protected for project work


• Security and IT Operations share a rotating on-call, and the manager owns reducing its load through automation


• Work is documented and shared asynchronously in Slack and Notion, with AI-assisted summaries and runbooks


• Regular 1:1s, team syncs, and reviews of AI-generated changes keep quality high

Required online and collaboration hours:

Schedule: US-based, with overlap across Pacific and Eastern time zones; no fixed core hours

On-Call Responsibilities:

• Schedule: Shared Security and IT Operations rotation; weekends only if paged. Manager participation is Unknown — HM to confirm at intake


• Frequency: Once every 6-8 weeks

Travel Requirements:

• Schedule: Once or twice a quarter


• Frequency: 20%

Onsite Requirements:

• Schedule: None; distributed team


• Frequency: Not applicable

Learn about TRM Speed in this position:

Protect about 80% of the team’s capacity for project and OKR work while handling the legacy operational workload
Rework a manual process into an automated, AI-assisted workflow while the team still supports the existing one
Deliver a team-wide epic from start to completion within 6 months

U.S. Citizenship Required: This role requires U.S. citizenship due to the nature of the work and applicable customer and government requirements.

The following represents the expected range of compensation for this role:

• Individual pay is determined by skills, qualifications, experience, and location. The compensation details listed in this posting reflect the US base salary only.


• The estimated base salary range for this role is $215,000-$235,000.


• Additionally, this role may be eligible to participate in TRM’s equity plan.


• Please note – we factor in the different costs for geographies outside the United States.