Engineering Manager, Language Security (TuxCare)

TuxCare offers a portfolio of security solutions for Linux and open-source software aimed at enterprise organizations. TuxCare's Endless Lifecycle Support helps organizations continue using end-of-life software securely by providing security patches for unsupported versions of Linux distributions and language ecosystems including Java, JavaScript/Node.js, Python, PHP, Go, Spring, Angular, Django, and Flask.

• Strong background in software development across multiple language ecosystems with at least 6 years of hands-on experience
• 3+ years of engineering leadership experience in a product company
• Proven experience with technical delivery and accountability for team outcomes
• Solid working knowledge of at least three of the following languages: Java, JavaScript, Go, Python, PHP
• Hands-on experience with security research or vulnerability analysis including CVE triage and patch backporting
• Ability to work effectively in distributed teams and larger organizational structures
• Strong communication skills for stakeholder engagement and meeting external delivery expectations
• Experience building or improving engineering processes from scratch
• Experience with CI/CD systems like GitLab CI, Jenkins and dependency management tools like Maven/Gradle, npm, pip, Go modules
• Upper-intermediate or higher proficiency in English (written and spoken)

Nice to have:

• Hands-on experience identifying and analyzing vulnerabilities in language-ecosystem applications
• Understanding of the security vulnerability lifecycle (CVE, CVSS, CWE, CSAF/VEX)
• Background in open-source security, supply chain security, or Endless Lifecycle Support (ELS) products
• Experience integrating AI tooling into research or patching workflows
• Knowledge of Docker, Kubernetes, or cloud-native ecosystems

People & Teams:

• Lead and develop four teams (Java, JavaScript/Go, Python, PHP) totaling about 18 engineers
• Build a culture of technical excellence, accountability, and continuous improvement
• Define hiring plans, conduct performance reviews, and drive career development for team members
• Manage onboarding and ramp-up of new team members, projects, and libraries into scope

Technical Direction:

• Set and enforce standards for CVE analysis, vulnerability assessment, patch backporting, and security release processes across all language ecosystems
• Drive consistency in tooling and workflows across teams including CI/CD pipelines, patch delivery, and release processes
• Evaluate and guide AI-assisted automation for backporting and vulnerability discovery
• Serve as final technical escalation point for complex or cross-team security issues

Delivery & Operations:

• Own SLA compliance across all language platforms
• Align team efforts with client expectations and delivery commitments
• Organize and improve development workflows and engineering processes continuously
• Coordinate internal documentation to reflect actual project states
• Ensure coordination between language teams and OS, Docker, and platform teams
• Manage scope boundaries and overlap with OS and platform teams, focusing on shared dependencies and cross-ecosystem vulnerabilities

By applying, candidates consent to their personal data being processed according to the company's Privacy Policy.