Senior Manager, Cyber Platforms & Engineering

Cyber Platforms & Engineering Senior Manager 

Overview 

The Cyber Platforms & Engineering Senior Manager is The Coca-Cola Company's operational owner of cybersecurity for the Company's non-core but business-critical technology platforms. This role ensures that platforms such as Power Platform, SAP (from a cybersecurity engineering perspective, distinct from GRC and role-based access), Salesforce, and connected product and IoT-enabled consumer platforms are securely configured, continuously monitored, and hardened against evolving threats. The Senior Manager works at the intersection of platform technology and cybersecurity, ensuring that security is engineered into these platforms rather than bolted on. 

Reporting to the Senior Director, Security Engineering & Identity, this is an individual-contributor role that will build and lead a growing team as the program matures. The Senior Manager is a peer to the team responsible for core security platforms (SIEM, SOAR, PKI, DLP engineering) and focuses on the expanding universe of business and product platforms that require dedicated cybersecurity expertise. The role partners closely with platform owners, business technology teams, and the broader Security Engineering function to ensure consistent security standards, configurations, and monitoring across the Company's platform portfolio. 

Key Responsibilities 

Platform Security Engineering 

• Own the cybersecurity engineering posture for assigned business and product platforms, including Power Platform, SAP (security configuration, hardening, and monitoring, distinct from GRC/role management), Salesforce, and connected product and IoT-enabled consumer platforms. 

• Define, implement, and maintain security baseline configurations, hardening standards, and monitoring controls for each platform. 

• Conduct security assessments of platform configurations, integrations, and custom development to identify and remediate vulnerabilities, misconfigurations, and excessive permissions. 

• Ensure platform security controls align with the Company's cybersecurity policies, standards, and architectural direction. 

Connected Product & IoT Platform Security 

• Provide cybersecurity engineering support for the Company's connected product platforms and IoT-enabled consumer technology, ensuring secure design, configuration, and operation. 

• Assess and mitigate security risks across connected product architectures, including device communication, cloud backends, API integrations, and data handling. 

• Partner with product engineering and manufacturing technology teams to embed security into product platform development and deployment lifecycles. 

Monitoring, Detection & Incident Support 

• Ensure security monitoring and alerting are in place for assigned platforms, with appropriate integration into the Company's SIEM and SOC workflows. 

• Support incident response activities for security events involving assigned platforms, providing platform-specific expertise and remediation guidance. 

• Track and report on platform security posture, vulnerability remediation, and configuration compliance. 

Cross-Platform Governance & Standards 

• Partner with the broader Security Engineering & Identity team to ensure consistent security standards, tooling, and practices across core and non-core platforms. 

• Contribute to the development of platform security standards, reference architectures, and assessment frameworks that can scale across the Company's growing platform portfolio. 

• Evaluate new platform technologies and integrations for security implications, providing guidance to business and technology stakeholders. 

Team Building & Stakeholder Engagement 

• Build and lead a growing team of platform security engineers as the program expands. 

• Engage with platform owners, business technology leaders, and product teams as a trusted cybersecurity partner, balancing security requirements with platform functionality and business needs. 

• Manage vendor relationships and third-party support for platform security tools and assessments. 

Qualifications 

• Minimum 6 years of progressive cybersecurity experience, with significant focus on security engineering for enterprise business platforms, cloud-based SaaS applications, or product/IoT technology. 

• Demonstrated hands-on experience with the security architecture, configuration, and hardening of at least two of the following: Microsoft Power Platform, SAP (security engineering, not GRC), Salesforce, or connected product/IoT platforms. 

• Strong understanding of platform security fundamentals, including identity and access management, API security, data protection, secure integration patterns, and configuration compliance. 

• Experience with security assessment and monitoring of SaaS and PaaS platforms, including the ability to evaluate platform-specific risks beyond traditional infrastructure security. 

• Working knowledge of IoT and connected device security principles, including device authentication, secure communication, and cloud backend security. 

• Familiarity with cybersecurity frameworks and standards such as NIST CSF, ISO 27001/27002, and OWASP, applied in platform security contexts. 

• Experience leading or building technical teams, with the ability to attract, develop, and retain platform security engineering talent. 

• Strong communication skills, with the ability to engage platform owners, product teams, and business leaders on security requirements and risk trade-offs. 

• Relevant certifications such as CISSP, CCSP, Microsoft Security certifications, SAP Security certifications, or platform-specific credentials are preferred. 

• Scripting and automation skills (PowerShell, Python, or equivalent) for security assessment, monitoring, and configuration management. 

Education 

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related technical field required. 

• Master's degree or relevant professional certification (CISSP, CCSP, or platform-specific certification) highly desirable. 

Reports to the Senior Director, Security Engineering & Identity, within the Chief Information Security Office (CISO) organization. 

Individual contributor initially, building and leading a growing team of platform security engineers as the program matures. 

Location 

Atlanta, GA (Global Headquarters) 

Travel 

Estimated up to 10% travel, primarily domestic, with occasional travel for vendor engagements, platform assessments, and industry events.