Director, Defensive Security

Role Description

The Dropbox Security team is seeking an experienced leader who will report to the Head of Security. The Security Director, Defensive Security is responsible for holistic threat prevention, detection and response for threats directed against Dropbox customers and business. This is a technical management role, requiring deep security knowledge and proven leadership and management skills. The position is closely involved in helping to mentor, develop and evaluate employee performance as well as helping with development and continuous improvement of the Security team. This role will strategically influence how we secure our customers and company, implement a multi-year strategy, provide necessary guidance and technical leadership to more junior engineers, and participate in sharing information with the company and senior leaders. A successful candidate will be able to balance constant evolving tactical needs with the ability to drive critical initiatives across the company and with our partners. 

Responsibilities

• Drive complex strategic, security initiatives to delivery
• Demonstrate leadership by managing and growing engineering expertise, and setting technical direction and priorities within the organization
• Partner with other areas of the organization to drive remediation of findings and ensure regulatory/audit compliance
• Advocate security and secure practices across Dropbox maintaining a balance of security and usability
• Lead Defensive Security teams (Vulnerability Management, Infrastructure Hardening, Threat Detection, and Incident Response) providing operational and strategic planning and prioritizing the allocation of resources.
• Deliver security guidance concisely and clearly for detection and response projects and activities
• Advise senior management via supporting documentation on detection and response related items
• Guide conversations to remove blockers and encourage collaboration across teams
• Provide a point of escalation for teams facing complex technical challenges
• Expose technology and organizational needs throughout the department
  

Requirements

• 8+ years of experience working in a security-focused role
• 5+ years of experience in a senior management role
• Experience leading and managing security engineers
• In-depth knowledge of attack surface reduction, boundary and endpoint threat defense, data security, and technical controls
• Experience performing or leading security operations center functions
• In-depth knowledge of the cyber security threat landscape and experience in bringing it to bear in a tailored response to a major incident.
• Data driven, customer focused, self-motivated, and organized
• Ability to communicate technical details clearly across organizational boundaries
• Familiarity with relevant security and compliance frameworks such as ISO 27001, NIST, GDPR, and SOC 2.
• Bachelors or Master’s Degree in a Cybersecurity or related discipline, or equivalent experience
• Understanding of the tools, techniques and tactics of Targeted Threat Actors and insight into present and future trends.
• Applicable Professional qualification e.g CISSP, GSOM, GCIH, GCIA, GPEN, GCFE, GREM, EnCE

Total Rewards

For candidates hired in San Francisco metro, New York City metro, or Seattle metro, the expected salary/On-Target Earnings (OTE) range for the role is currently $276,300 - $325,000 - $373,800. 

For candidates hired in the following locations: Austin (TX) metro, Chicago metro, California (outside SF metro), Colorado, Connecticut (outside NYC metro), Delaware, Massachusetts, New Hampshire, New York (outside NYC metro), Oregon, Pennsylvania (outside NYC or DC metro), Washington (outside Seattle metro) and Washington DC metro, the expected salary/On-Target Earnings (OTE) range for the role is currently $248,600 - $292,500 - $336,400. 

For candidates hired in all other US locations, the expected salary/On-Target Earnings (OTE) range for this role is currently $221,000 - $260,000 - $299,000. 

Range(s) is subject to change. Dropbox takes a number of factors into account when determining individual starting pay, including job and level they are hired into, location/metropolitan area, skillset, and peer compensation. Dropbox uses the zip code of an employee’s remote work location to determine which metropolitan pay range we use. 

Salary/OTE is just one component of Dropbox’s total rewards package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).