Senior Software Engineering Manager, Product Security

@ Whoop

Senior Software Engineering Manager, Product Security

Posted 10 months ago

This job is still taking applications, but it's been up a while.

About the job

WHOOP is dedicated to unlocking human performance and healthspan. As a Senior Software Engineering Manager, you will lead security teams, ensure HIPAA compliance, and drive secure development practices to protect member data and enable innovation.

Requirements

Managing multiple security teams
Experience with security or compliance
Deep product security knowledge
Leadership and communication skills

Qualifications

Proven leadership in security engineering
Experience with HIPAA compliance
Strong technical background
Excellent interpersonal skills

Full job description

At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP empowers members to perform at a higher level and live longer through a deeper understanding of their bodies and daily lives. Protecting our members’ data and ensuring our systems scale securely and reliably is core to this mission.

As a Senior Engineering Manager at WHOOP, you will play a critical leadership role as part of our cross-functional Platform organization. You will build, lead, and grow multiple teams responsible for protecting the security and privacy of our members by driving secure development practices, managing product-facing security programs, and building scalable security solutions.

In addition to core product security responsibilities, you will be responsible for collaborating closely with cross-functional partners across Product, Software, Legal, and Compliance to achieve and maintain HIPAA compliance across WHOOP’s products and infrastructure. We are seeking a leader with prior experience helping an organization transition into HIPAA-compliant standards, capable of aligning technical execution with regulatory and business objectives.

On the people management side, you will manage and mentor a team of engineers, provide regular performance feedback, and ensure professional development and growth. You will work to foster a culture of innovation, teamwork, psychological safety, and continuous learning. You are responsible for promoting a positive work environment where all team members feel valued, supported, and empowered to do their best work.

RESPONSIBILITIES:

Build, lead, and grow multiple engineering teams executing on WHOOP’s product security strategy, including member authentication, vulnerability management, cloud governance, privacy rights fulfillment, and threat modeling.
Oversee and drive WHOOP’s engineering readiness for HIPAA compliance, coordinating technical implementation, evidence collection, and ongoing governance activities across teams.
Define and communicate long-term security strategy, architecture, and design principles for product-facing systems.
Partner with engineering and compliance leadership to embed security and privacy by design across the software development lifecycle.
Establish and enforce best practices, standards, and processes for secure software development, testing, and deployment.
Drive continuous improvement initiatives that enhance team productivity, quality, and overall business impact.
Provide mentorship, guidance, and career development for engineering managers and individual contributors.
Foster a culture of innovation, teamwork, psychological safety, and continuous learning within the Product Security organization.

QUALIFICATIONS:

Proven experience as a technical leader managing multiple teams or a growing security engineering organization.
Experience growing high level individual contributor career growth at the staff level or higher.
Demonstrated success leading security or compliance initiatives in a regulated environment, preferably HIPAA or other health data compliance frameworks.
Deep understanding of product security principles, including vulnerability management, data privacy, threat modeling, and secure software development.
Experience building or integrating developer security tooling to improve secure-by-default practices.
Strong technical background in software development, testing, and deployment processes.
Excellent communication, interpersonal, and leadership skills with the ability to influence across teams and levels.

BONUS QUALIFICATIONS:

Experience with AWS cloud environments and data-driven decision-making.
Hands-on experience with infrastructure and cloud security in containerized environments (e.g., Docker, Kubernetes).
Background in incident response and post-mortem analysis for security events.
Familiarity with automation frameworks for vulnerability scanning, compliance checks, or infrastructure security.
Prior experience scaling a product security or compliance engineering organization through major regulatory transitions (e.g., SOC 2 → HIPAA, or HIPAA → HITRUST).

ABOUT YOU:

You’re a strategic and people-focused leader who thrives on balancing hands-on technical oversight with long-term organizational growth.
You have experience building and scaling teams to meet new regulatory and business demands.
You’re passionate about creating secure, privacy-first systems that protect member data and enable innovation.
You collaborate effectively across technical and non-technical teams and can operate confidently in both strategic and tactical domains.
Above all, you believe that security and compliance are enablers of innovation, and you lead by fostering a culture that supports both speed and safety.

Learn more about our Software Org and how to be successful in your engineering career at WHOOP via our Career Framework.

This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.

Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.

WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.

At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.

The U.S. base salary range for this full-time position is $170,000 - $230,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.

In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.

These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Learn more about WHOOP.

Show full description